CVE-2019-19728

HIGH

SchedMD Slurm <18.08.9, <19.05.5 - Privilege Escalation

Title source: llm
STIX 2.1

Description

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.

References (5)

Core 5
Core References
Mailing List, Vendor Advisory x_refsource_misc
https://lists.schedmd.com/pipermail/slurm-announce/
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.suse.com/show_bug.cgi?id=1159692
Vendor Advisory x_refsource_confirm
https://www.schedmd.com/news.php
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00038.html
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2021/dsa-4841

Scores

CVSS v3 7.5
EPSS 0.0041
EPSS Percentile 61.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-269
Status published
Products (3)
debian/debian_linux 10.0
opensuse/leap 15.1
schedmd/slurm < 18.08.9
Published Jan 13, 2020
Tracked Since Feb 18, 2026