The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on the system. Any exploitation of this is dependent on the user being able to cause or anticipate the failure (non-zero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (September 2005) to present. Workarounds to prevent exploitation of this are to either disable your Prolog script, or modify it such that it always returns 0 ("success") and adjust it to set the node as down using scontrol instead of relying on the slurmd to handle that automatically. If you do not have a Prolog set you are unaffected by this issue.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libpam-slurm" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libpam-slurm-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libpmi0" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libpmi0-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libpmi0-dev" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurm-dev" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurm-perl" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurm-perl-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurm26" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurm26-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurmdb-dev" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurmdb-perl" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurmdb-perl-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurmdb26" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "libslurmdb26-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-basic-plugins" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-basic-plugins-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-basic-plugins-dev" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-doc" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-slurmdbd" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-slurmdbd-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-sview" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-sview-dbgsym" }, { "binary_version": "2.6.5-1ubuntu0.1~esm6", "binary_name": "slurm-llnl-torque" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libpam-slurm" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libpam-slurm-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libpmi0" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libpmi0-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libpmi0-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libpmi0-dev" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurm-dev" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurm-perl" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurm-perl-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurm29" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurm29-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurm29-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurmdb-dev" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurmdb-perl" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurmdb-perl-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurmdb29" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurmdb29-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "libslurmdb29-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-client" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-client-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-client-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-client-emulator" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-client-emulator-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-llnl" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-llnl-slurmdbd" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-basic-plugins" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-basic-plugins-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-basic-plugins-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-basic-plugins-dev" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-doc" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-emulator" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-emulator-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurm-wlm-torque" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmctld" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmctld-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmctld-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmd" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmd-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmd-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmdbd" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmdbd-dbg" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "slurmdbd-dbgsym" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "sview" }, { "binary_version": "15.08.7-1ubuntu0.1~esm3", "binary_name": "sview-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "19.05.3.2-2", "binary_name": "libpam-slurm" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpam-slurm-adopt" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpmi0" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpmi0-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpmi0-dev" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpmi2-0" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpmi2-0-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "libpmi2-0-dev" }, { "binary_version": "19.05.3.2-2", "binary_name": "libslurm-dev" }, { "binary_version": "19.05.3.2-2", "binary_name": "libslurm-perl" }, { "binary_version": "19.05.3.2-2", "binary_name": "libslurm34" }, { "binary_version": "19.05.3.2-2", "binary_name": "libslurm34-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "libslurmdb-perl" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-client" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-client-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-client-emulator" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm-basic-plugins" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm-basic-plugins-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm-basic-plugins-dev" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm-doc" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm-emulator" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurm-wlm-torque" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurmctld" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurmctld-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurmd" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurmd-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurmdbd" }, { "binary_version": "19.05.3.2-2", "binary_name": "slurmdbd-dbgsym" }, { "binary_version": "19.05.3.2-2", "binary_name": "sview" } ] }