Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-41914

SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.

Published

2023-11-03T05:15:30.000

Last Modified

2024-11-21T08:21:54.603

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

Weaknesses

Type: Primary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	schedmd	slurm	< 22.05.10	Yes
Application	schedmd	slurm	< 23.02.6	Yes
Operating System	fedoraproject	fedora	39	Yes

References

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OWKTCYZT3DXEH66QXQJYB7NI7ONDRS4M/ Mailing List, Third Party Advisory ([email protected])
https://lists.schedmd.com/pipermail/slurm-announce/2023/000100.html Mailing List, Vendor Advisory ([email protected])
https://schedmd.com/security.php Product ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OWKTCYZT3DXEH66QXQJYB7NI7ONDRS4M/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.schedmd.com/pipermail/slurm-announce/2023/000100.html Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://schedmd.com/security.php Product (af854a3a-2127-422b-91ae-364da2661108)