VDB
CVE-2023-49934
CVE-2023-49934
PUBLISHED
CVSS 9.800000190734863 CRITICAL
An issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD database. The fixed version is 23.11.1.
EPSS 0.77% · 54.0th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.77%
54.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| schedmd | slurm | 23.11, 23.11, 23.11 |
| n/a | n/a | *, n/a |
Timeline
- Dec 14, 2023 CVE Published
- Dec 14, 2023 EPSS Score
- Jan 10, 2024 PoC Published
- Jan 13, 2024 EPSS Score
- Feb 12, 2024 EPSS Score
- Apr 12, 2024 EPSS Score
- May 11, 2024 EPSS Score
- Jun 10, 2024 EPSS Score
- Jul 10, 2024 EPSS Score
- Aug 9, 2024 EPSS Score
- Oct 8, 2024 EPSS Score
- Nov 7, 2024 EPSS Score
References
- FEDORA-2023-9a74d212f8 vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ url
- https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.html url
- https://www.schedmd.com/security-archive.php url
- FEDORA-2023-540de58d84 vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/ url
- https://nvd.nist.gov/vuln/detail/CVE-2023-49934 advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO url