What’s Vulnerable › Vulnerabilities
CVE-2018-10995
- Severity: medium (CVSS 5.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-05-30 · updated 2026-06-17
- Weakness: CWE-20
Description
SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).
Affected products
- Debian Linux: 8.0, 9.0
- SchedMD Slurm: through 17.02.10.1; 17.11.0.0-pre1, 17.11.0.0-pre2, 17.11.0.0-rc1, 17.11.0.0-rc2, 17.11.0.0-rc3, 17.11.0.1 (+8)
References
- https://lists.debian.org/debian-lts-announce/2018/07/msg00029.html
- https://lists.debian.org/debian-lts-announce/2018/08/msg00008.html
- https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html
- https://www.debian.org/security/2018/dsa-4254
- https://www.schedmd.com/news.php?id=203
- https://lists.debian.org/debian-lts-announce/2018/07/msg00029.html
- https://lists.debian.org/debian-lts-announce/2018/08/msg00008.html
- https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html
- https://www.debian.org/security/2018/dsa-4254
- https://www.schedmd.com/news.php?id=203
Get alerted when CVE-2018-10995 or the next vulnerability affects your stack