The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-234df8a1d4 advisory.

    - Update to slurm 22.05.10
    - Use mariadb-connector-c-devel not mariadb-devel
    - Closes CVE-2023-41914

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0288-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of     Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC     traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
    (CVE-2023-49933)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads     to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1. (CVE-2023-49936)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,     attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are     22.05.11, 23.02.7, and 23.11.1. (CVE-2023-49937)

  - An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an     attacker can modified their extended group list that is used with the sbcast subsystem, and open files     with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7. (CVE-2023-49938)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4115-1 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4120-1 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4563-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4580-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8236-1 advisory.

    It was discovered that Slurm did not correctly handle certain file system operations. An attacker could     possibly use this issue to modify files or leak sensitive information. This issue only affected Ubuntu     22.04 LTS. (CVE-2023-41914)

    Ryan Hall discovered that Slurm did not correctly enforce certain message integrity checks. An attacker     could possibly use this issue to bypass integrity checks. This issue only affected Ubuntu 22.04 LTS.
    (CVE-2023-49933)

    Ryan Hall discovered that Slurm did not correctly handle certain memory operations. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected     Ubuntu 22.04 LTS. (CVE-2023-49937)

    Ryan Hall discovered that Slurm did not correctly handle certain access control mechanisms. An attacker     could possibly use this issue to modify files or leak sensitive information. This issue only affected     Ubuntu 22.04 LTS. (CVE-2023-49938)

    It was discovered that Slurm did not correctly handle user promotion. An attacker could possibly use this     issue to promote themselves to an administrator. (CVE-2025-43904)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4119-1 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4121-1 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4564-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4578-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0314-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of     Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC     traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
    (CVE-2023-49933)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads     to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1. (CVE-2023-49936)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,     attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are     22.05.11, 23.02.7, and 23.11.1. (CVE-2023-49937)

  - An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an     attacker can modified their extended group list that is used with the sbcast subsystem, and open files     with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7. (CVE-2023-49938)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0313-1 advisory.

  - SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for     gaining ownership of a file, overwriting a file, or deleting files. (CVE-2023-41914)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of     Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC     traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
    (CVE-2023-49933)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads     to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1. (CVE-2023-49936)

  - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,     attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are     22.05.11, 23.02.7, and 23.11.1. (CVE-2023-49937)

  - An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an     attacker can modified their extended group list that is used with the sbcast subsystem, and open files     with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7. (CVE-2023-49938)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
184055	Fedora 38 : slurm (2023-234df8a1d4)	Nessus	Fedora Local Security Checks	2023/10/30	2024/11/14	high
189881	SUSE SLES15 / openSUSE 15 Security Update : slurm_20_11 (SUSE-SU-2024:0288-1)	Nessus	SuSE Local Security Checks	2024/2/1	2024/2/1	critical
183379	SUSE SLES12 Security Update : slurm (SUSE-SU-2023:4115-1)	Nessus	SuSE Local Security Checks	2023/10/19	2023/11/10	high
183381	SUSE SLES12 Security Update : slurm (SUSE-SU-2023:4120-1)	Nessus	SuSE Local Security Checks	2023/10/19	2023/11/10	high
186263	SUSE SLES12 Security Update : slurm_23_02 (SUSE-SU-2023:4563-1)	Nessus	SuSE Local Security Checks	2023/11/25	2023/11/25	high
186341	SUSE SLES15 Security Update : slurm_22_05 (SUSE-SU-2023:4580-1)	Nessus	SuSE Local Security Checks	2023/11/28	2023/11/28	high
314206	Ubuntu 22.04 LTS / 24.04 LTS : Slurm vulnerabilities (USN-8236-1)	Nessus	Ubuntu Local Security Checks	2026/5/11	2026/5/11	critical
183356	SUSE SLES12 Security Update : slurm (SUSE-SU-2023:4119-1)	Nessus	SuSE Local Security Checks	2023/10/19	2023/11/10	high
183382	SUSE SLES15 Security Update : slurm (SUSE-SU-2023:4121-1)	Nessus	SuSE Local Security Checks	2023/10/19	2023/11/10	high
186261	SUSE SLES15 Security Update : slurm_23_02 (SUSE-SU-2023:4564-1)	Nessus	SuSE Local Security Checks	2023/11/25	2023/11/25	high
186340	SUSE SLES15 / openSUSE 15 Security Update : slurm (SUSE-SU-2023:4578-1)	Nessus	SuSE Local Security Checks	2023/11/28	2023/11/28	high
189961	SUSE SLES15 Security Update : slurm (SUSE-SU-2024:0314-1)	Nessus	SuSE Local Security Checks	2024/2/3	2024/2/3	critical
189965	SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2024:0313-1)	Nessus	SuSE Local Security Checks	2024/2/3	2024/2/3	critical

检测

插件搜索

high

critical

high

high

high

high

critical

high

high

high

high

critical

critical