VDB
CVE-2023-49937
CVE-2023-49937
PUBLISHED
CVSS 9.800000190734863 CRITICAL
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
EPSS 1.39% · 69.6th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.39%
69.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| schedmd | slurm | 22.05, 23.11, 23.11 |
| n/a | n/a | n/a |
Timeline
- Dec 14, 2023 CVE Published
- Dec 14, 2023 EPSS Score
- Jan 12, 2024 EPSS Score
- Feb 10, 2024 EPSS Score
- Apr 9, 2024 EPSS Score
- May 8, 2024 EPSS Score
- Jun 6, 2024 EPSS Score
- Jul 6, 2024 EPSS Score
- Aug 4, 2024 EPSS Score
- Oct 1, 2024 EPSS Score
- Oct 31, 2024 EPSS Score
- Nov 29, 2024 EPSS Score
References
- https://www.schedmd.com/security-archive.php url
- FEDORA-2023-9a74d212f8 vendor-advisory
- FEDORA-2023-540de58d84 vendor-advisory
- https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/ url
- https://nvd.nist.gov/vuln/detail/CVE-2023-49937 advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO url