Approved changes feed: RSS · Atom

cpe:2.3:a:llnl:slurm:_nil_:*:*:*:*:*:*:*

part: a version: _nil_ update: *

VendorLlnl (2b2d55a3-c172-5cfd-938b-33e40ec8a906)
ProductSlurm (aa1867ed-32cb-507a-aad4-2acf65ba7dfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/slurm purl2cpe 2026-06-01 10:15:47.657491

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0128 vulnerable 2026-06-08 04:51:07.733016 Details available
plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Published: 2009-01-15T17:00:00.000Z
Updated: 2024-09-16T16:42:52.728Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.