DEBIAN-CVE-2023-49938

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2023-49938
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49938.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-49938
Upstream
Published
2023-12-14T05:15:11Z
Modified
2025-09-19T07:33:31.267071Z
Summary
[none]
Details

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7.

References

Affected packages

Debian:12 / slurm-wlm

Package

Name
slurm-wlm
Purl
pkg:deb/debian/slurm-wlm?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
22.05.8-4+deb12u2

Affected versions

22.*

22.05.8-4
22.05.8-4+deb12u1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / slurm-wlm

Package

Name
slurm-wlm
Purl
pkg:deb/debian/slurm-wlm?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.11.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / slurm-wlm

Package

Name
slurm-wlm
Purl
pkg:deb/debian/slurm-wlm?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.11.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}