CVE-2022-29500
Summary
| CVE | CVE-2022-29500 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-05-05 17:15:00 UTC |
| Updated | 2023-11-07 03:46:00 UTC |
| Description | SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Fedoraproject | Fedora | 34 | All | All | All |
| Operating System | Fedoraproject | Fedora | 35 | All | All | All |
| Operating System | Fedoraproject | Fedora | 36 | All | All | All |
| Application | Schedmd | Slurm | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| The slurm-announce Archives | MISC | lists.schedmd.com | |
| [SECURITY] Fedora 35 Update: slurm-21.08.8-2.fc35 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: slurm-21.08.8-2.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 36 Update: slurm-21.08.8-2.fc36 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: slurm-21.08.8-2.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Debian -- Security Information -- DSA-5166-1 slurm-wlm | DEBIAN | www.debian.org | |
| News | SchedMD | MISC | www.schedmd.com | |
| [SECURITY] Fedora 36 Update: slurm-21.08.8-2.fc36 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| News | SchedMD | MISC | www.schedmd.com | |
| [SECURITY] Fedora 35 Update: slurm-21.08.8-2.fc35 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 179380 Debian Security Update for slurm-wlm (DSA 5166-1)
- 184175 Debian Security Update for slurm-wlm (CVE-2022-29500)
- 199871 Ubuntu Security Notification for Slurm Vulnerabilities (USN-6458-1)
- 282707 Fedora Security Update for slurm (FEDORA-2022-916bb58e38)
- 282708 Fedora Security Update for slurm (FEDORA-2022-eeeff46680)
- 282709 Fedora Security Update for slurm (FEDORA-2022-6d9d1862ee)
- 284291 Fedora Security Update for slurm (FEDORA-2022-6a9dc1d46b)
- 753116 SUSE Enterprise Linux Security Update for slurm_20_11 (SUSE-SU-2022:1831-1)
- 753123 SUSE Enterprise Linux Security Update for slurm (SUSE-SU-2022:3490-1)
- 753124 SUSE Enterprise Linux Security Update for slurm (SUSE-SU-2022:3468-1)
- 753274 SUSE Enterprise Linux Security Update for slurm (SUSE-SU-2022:3535-1)
- 753320 SUSE Enterprise Linux Security Update for slurm_20_11 (SUSE-SU-2022:1815-1)
- 753433 SUSE Enterprise Linux Security Update for slurm (SUSE-SU-2022:1666-1)
- 753459 SUSE Enterprise Linux Security Update for slurm_20_02 (SUSE-SU-2022:3491-1)
- 753488 SUSE Enterprise Linux Security Update for slurm_18_08 (SUSE-SU-2022:3462-1)