CVE-2009-2084

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-16 · updated 2026-06-16
Weakness: CWE-255

Description

Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.

Affected products

Llnl Slurm: through 1.3.13; 1.2, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4 (+8)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980
http://secunia.com/advisories/34831
http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944
http://www.debian.org/security/2009/dsa-1776
http://www.securityfocus.com/bid/34638
http://www.vupen.com/english/advisories/2009/1128
https://exchange.xforce.ibmcloud.com/vulnerabilities/50126
https://exchange.xforce.ibmcloud.com/vulnerabilities/50127
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980
http://secunia.com/advisories/34831
http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944
http://www.debian.org/security/2009/dsa-1776

Get alerted when CVE-2009-2084 or the next vulnerability affects your stack