Incorrect default permissions in slurm_18_08 - CVE-2022-31251

Vulnerability identifier: #VU67719

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-31251

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions in slurm testsuite. A local user with access to the system can execute arbitrary code with root privileges.

slurm_18_08
slurm-lua
slurm-torque-debuginfo
slurm-torque
slurm-sql-debuginfo
slurm-sql
slurm-slurmdbd-debuginfo
slurm-slurmdbd
slurm-slurmdb-direct
slurm-sched-wiki
slurm-plugins-debuginfo
slurm-plugins
slurm-pam_slurm-debuginfo
slurm-pam_slurm
slurm-munge-debuginfo
slurm-munge
slurm-lua-debuginfo
slurm-doc
slurm-devel
slurm-debugsource
slurm-debuginfo
slurm-config
slurm-auth-none-debuginfo
slurm-auth-none
slurm
perl-slurm-debuginfo
perl-slurm
libslurm31-debuginfo
libslurm31
libpmi0-debuginfo
libpmi0
libslurm32
slurm-node-debuginfo
slurm-node
libslurm32-debuginfo
libpmi0_18_08-debuginfo
libpmi0_18_08
slurm_18_08-torque-debuginfo
slurm_18_08-torque
slurm_18_08-sql-debuginfo
slurm_18_08-sql
slurm_18_08-slurmdbd-debuginfo
slurm_18_08-slurmdbd
slurm_18_08-plugins-debuginfo
slurm_18_08-plugins
slurm_18_08-pam_slurm-debuginfo
slurm_18_08-pam_slurm
slurm_18_08-node-debuginfo
slurm_18_08-node
slurm_18_08-munge-debuginfo
slurm_18_08-munge
slurm_18_08-lua
slurm_18_08-lua-debuginfo
libslurm33
libslurm33-debuginfo
perl-slurm_18_08
perl-slurm_18_08-debuginfo
slurm_18_08-auth-none
slurm_18_08-auth-none-debuginfo
slurm_18_08-config
slurm_18_08-debuginfo
slurm_18_08-debugsource
slurm_18_08-devel
slurm_18_08-doc
slurm_18_08-hdf5-debuginfo
slurm_18_08-openlava
slurm_18_08-seff
slurm_18_08-sjstat
slurm_18_08-hdf5
slurm_18_08-cray-debuginfo
slurm_18_08-cray
slurm_18_08-config-man
slurm_18_08-webdoc
slurm_18_08-sview-debuginfo
slurm_18_08-sview
slurm-sview
slurm-sview-debuginfo
slurm-config-man
slurm_20_02-lua
slurm_20_02-doc
slurm_20_02-devel
slurm_20_02-debugsource
slurm_20_02-debuginfo
slurm_20_02-config-man
slurm_20_02-config
slurm_20_02-auth-none-debuginfo
slurm_20_02-auth-none
slurm_20_02
perl-slurm_20_02-debuginfo
perl-slurm_20_02
libslurm35-debuginfo
libslurm35
libpmi0_20_02-debuginfo
libpmi0_20_02
libnss_slurm2_20_02-debuginfo
libnss_slurm2_20_02
slurm_20_02-munge
slurm_20_02-lua-debuginfo
slurm_20_02-torque-debuginfo
slurm_20_02-torque
slurm_20_02-sview-debuginfo
slurm_20_02-sview
slurm_20_02-sql-debuginfo
slurm_20_02-sql
slurm_20_02-slurmdbd-debuginfo
slurm_20_02-slurmdbd
slurm_20_02-plugins
slurm_20_02-pam_slurm-debuginfo
slurm_20_02-pam_slurm
slurm_20_02-node-debuginfo
slurm_20_02-node
slurm_20_02-munge-debuginfo
slurm_20_02-plugins-debuginfo
slurm_20_02-webdoc
slurm_20_02-hdf5-debuginfo
slurm_20_02-hdf5
slurm_20_02-cray-debuginfo
slurm_20_02-cray
slurm_20_02-openlava
slurm_20_02-rest
slurm_20_02-seff
slurm_20_02-sjstat
slurm_20_02-rest-debuginfo
libnss_slurm2-debuginfo
libnss_slurm2
slurm-webdoc
SUSE Linux Enterprise Module for HPC
SUSE Linux Enterprise High Performance Computing
openSUSE Leap

Install updates from vendor's website.

slurm_18_08 - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm-lua - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-torque-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-torque - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-sql-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-sql - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-slurmdbd-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-slurmdbd - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-slurmdb-direct - update to 17.02.11-6.53.1
slurm-sched-wiki - update to 17.02.11-6.53.1
slurm-plugins-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-plugins - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-pam_slurm-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-pam_slurm - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-munge-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-munge - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-lua-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-doc - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-devel - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-debugsource - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-config - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-auth-none-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-auth-none - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
perl-slurm-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
perl-slurm - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
libslurm31-debuginfo - update to 17.02.11-6.53.1
libslurm31 - update to 17.02.11-6.53.1
libpmi0-debuginfo - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
libpmi0 - addressed in versions 17.02.11-6.53.1, 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
libslurm32 - update to 17.11.13-150000.6.40.1
slurm-node-debuginfo - addressed in versions 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-node - addressed in versions 17.11.13-150000.6.40.1, 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
libslurm32-debuginfo - update to 17.11.13-150000.6.40.1
libpmi0_18_08-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
libpmi0_18_08 - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-torque-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-torque - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-sql-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-sql - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-slurmdbd-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-slurmdbd - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-plugins-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-plugins - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-pam_slurm-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-pam_slurm - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-node-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-node - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-munge-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-munge - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-lua - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-lua-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
libslurm33 - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1, 18.08.9-150100.3.22.1
libslurm33-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1, 18.08.9-150100.3.22.1
perl-slurm_18_08 - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
perl-slurm_18_08-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-auth-none - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-auth-none-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-config - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-debuginfo - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-debugsource - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-devel - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-doc - addressed in versions 18.08.9-3.17.1, 18.08.9-150000.1.17.1
slurm_18_08-hdf5-debuginfo - update to 18.08.9-150000.1.17.1
slurm_18_08-openlava - update to 18.08.9-150000.1.17.1
slurm_18_08-seff - update to 18.08.9-150000.1.17.1
slurm_18_08-sjstat - update to 18.08.9-150000.1.17.1
slurm_18_08-hdf5 - update to 18.08.9-150000.1.17.1
slurm_18_08-cray-debuginfo - update to 18.08.9-150000.1.17.1
slurm_18_08-cray - update to 18.08.9-150000.1.17.1
slurm_18_08-config-man - update to 18.08.9-150000.1.17.1
slurm_18_08-webdoc - update to 18.08.9-150000.1.17.1
slurm_18_08-sview-debuginfo - update to 18.08.9-150000.1.17.1
slurm_18_08-sview - update to 18.08.9-150000.1.17.1
slurm-sview - addressed in versions 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-sview-debuginfo - addressed in versions 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm-config-man - addressed in versions 18.08.9-150100.3.22.1, 20.02.7-150200.3.14.2
slurm_20_02-lua - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-doc - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-devel - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-debugsource - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-config-man - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-config - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-auth-none-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-auth-none - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02 - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
perl-slurm_20_02-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
perl-slurm_20_02 - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
libslurm35-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1, 20.02.7-150200.3.14.2
libslurm35 - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1, 20.02.7-150200.3.14.2
libpmi0_20_02-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
libpmi0_20_02 - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
libnss_slurm2_20_02-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
libnss_slurm2_20_02 - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-munge - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-lua-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-torque-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-torque - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-sview-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-sview - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-sql-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-sql - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-slurmdbd-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-slurmdbd - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-plugins - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-pam_slurm-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-pam_slurm - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-node-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-node - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-munge-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-plugins-debuginfo - addressed in versions 20.02.7-3.14.1, 20.02.7-150100.3.24.1
slurm_20_02-webdoc - update to 20.02.7-150100.3.24.1
slurm_20_02-hdf5-debuginfo - update to 20.02.7-150100.3.24.1
slurm_20_02-hdf5 - update to 20.02.7-150100.3.24.1
slurm_20_02-cray-debuginfo - update to 20.02.7-150100.3.24.1
slurm_20_02-cray - update to 20.02.7-150100.3.24.1
slurm_20_02-openlava - update to 20.02.7-150100.3.24.1
slurm_20_02-rest - update to 20.02.7-150100.3.24.1
slurm_20_02-seff - update to 20.02.7-150100.3.24.1
slurm_20_02-sjstat - update to 20.02.7-150100.3.24.1
slurm_20_02-rest-debuginfo - update to 20.02.7-150100.3.24.1
libnss_slurm2-debuginfo - update to 20.02.7-150200.3.14.2
libnss_slurm2 - update to 20.02.7-150200.3.14.2
slurm-webdoc - update to 20.02.7-150200.3.14.2

• https://bugzilla.suse.com/show_bug.cgi?id=1201674

• SUSE update for slurm_18_08
• SUSE update for slurm_18_08
• SUSE update for slurm
• SUSE update for slurm_20_02
• SUSE update for slurm
• SUSE update for slurm_20_02
• SUSE update for slurm
• SUSE update for slurm