CVE-2023-49937

CRITICAL

Schedmd Slurm < 22.05.12 - Double Free

Title source: rule

Description

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

References (6)

[Mailing List, Vendor Advisory] https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.html

[Vendor Advisory] https://www.schedmd.com/security-archive.php

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/

Scores

CVSS v3 9.8

EPSS 0.0039

EPSS Percentile 59.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-415

Status published

Affected Products (3)

schedmd/slurm < 22.05.12

schedmd/slurm

Timeline

Published Dec 14, 2023

Tracked Since Feb 18, 2026