CVE-2018-10995 Other in n/a
Slurm workload manager mishandles user names and group IDs, potentially leading to unexpected behavior or security issues.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-10995?
CVE-2018-10995 is a medium-severity vulnerability in Debian Debian Linux, published on 30 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
Weakness: CWE-20
Which versions are affected by CVE-2018-10995?
It affects 2 products.
Linux distribution packages (2)
slurm SUSE:Linux Enterprise Module for HPC 12 | All versions | 17.02.11-6.19.1 |
slurm SUSE:Linux Enterprise Module for HPC 15 | All versions | 17.11.7-6.3.1 |
Products include Debian Debian Linux, Schedmd Slurm.
How do I fix CVE-2018-10995?
Upgrade to a fixed version.
Is CVE-2018-10995 being exploited?
There is no known exploitation of CVE-2018-10995 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-mpcp-f66m-rf47, SUSE-SU-2018:1652-1, SUSE-SU-2018:1925-1, UBUNTU-CVE-2018-10995.