CVE-2017-15566

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-11-01

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Slurm (Schedmd)

References

• http://www.securityfocus.com/bid/101675
• https://www.debian.org/security/2017/dsa-4023
• https://www.schedmd.com/news.php?id=193#OPT_193