CVE-2023-49937: An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute…

PriorityP350critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.39%

69.2th percentile

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	slurm-wlm	< slurm-wlm 22.05.8-4+deb12u2 (bookworm)	slurm-wlm 22.05.8-4+deb12u2 (bookworm)
schedmd	slurm	—	—
schedmd	slurm	>= 22.05 < 22.05.12	22.05.12
schedmd	slurm	>= 23.02 < 23.02.7	23.02.7

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

osv9.8CRITICAL

vendor_debian9.8CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.