DEBIAN-CVE-2023-49933

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

References

https://security-tracker.debian.org/tracker/CVE-2023-49933

Affected packages

Debian:12 / slurm-wlm

Package

Name: slurm-wlm
Purl: pkg:deb/debian/slurm-wlm?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

22.05.8-4+deb12u2

Affected versions

22.*

22.05.8-4

22.05.8-4+deb12u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49933.json"

Debian:13 / slurm-wlm

Package

Name: slurm-wlm
Purl: pkg:deb/debian/slurm-wlm?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

23.11.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49933.json"

Debian:14 / slurm-wlm

Package

Name: slurm-wlm
Purl: pkg:deb/debian/slurm-wlm?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

23.11.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-49933.json"