CVE-2023-49936
published 2023-12-14CVE-2023-49936: An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11…
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.11%
62.2th percentile
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | slurm-wlm | < slurm-wlm 22.05.8-4+deb12u2 (bookworm) | slurm-wlm 22.05.8-4+deb12u2 (bookworm) |
| schedmd | slurm | — | — |
| schedmd | slurm | >= 22.05 < 22.05.12 | 22.05.12 |
| schedmd | slurm | >= 23.02 < 23.02.7 | 23.02.7 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-49936: slurm-wlm - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL p...
vendor_debian·2023·CVSS 7.5
CVE-2023-49936 [HIGH] CVE-2023-49936: slurm-wlm - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL p...
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
Scope: local
bookworm: resolved (fixed in 22.05.8-4+deb12u2)
bullseye: open
forky: resolved (fixed in 23.11.3-1)
sid: resolved (fixed in 23.11.3-1)
trixie: resolved (fixed in 23.11.3-1)
GHSA
GHSA-pm82-478g-gq88: An issue was discovered in SchedMD Slurm 22
ghsa_unreviewed·2023-12-14
CVE-2023-49936 [HIGH] CWE-476 GHSA-pm82-478g-gq88: An issue was discovered in SchedMD Slurm 22
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
OSV
CVE-2023-49936: An issue was discovered in SchedMD Slurm 22
osv·2023-12-14·CVSS 7.5
CVE-2023-49936 [HIGH] CVE-2023-49936: An issue was discovered in SchedMD Slurm 22
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
No detection rules found.
No public exploits indexed.
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.htmlhttps://www.schedmd.com/security-archive.phphttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/https://lists.fedoraproject.org/archives/list/[email protected]/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/https://lists.fedoraproject.org/archives/list/[email protected]/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.htmlhttps://www.schedmd.com/security-archive.php
2023-12-14
Published