Approved changes feed: RSS · Atom

cpe:2.3:a:llnl:slurm:1.3.10:*:*:*:*:*:*:*

part: a version: 1.3.10 update: *

VendorLlnl (2b2d55a3-c172-5cfd-938b-33e40ec8a906)
ProductSlurm (aa1867ed-32cb-507a-aad4-2acf65ba7dfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/slurm purl2cpe 2026-06-01 10:15:47.623971

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3380 vulnerable 2026-06-08 04:55:14.351315 Details available
The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-09-17T00:25:30.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2084 vulnerable 2026-06-08 04:51:26.680743 Details available
Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.
Published: 2009-06-16T23:00:00.000Z
Updated: 2024-08-07T05:36:20.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.