Severity by source
Authenticated cluster users reach slurmdbd over network (PR:L, AV:N); unsafe queries risk full accounting DB read/write (C:H/I:H) but availability impact is unclear.
Lifecycle Timeline
1DescriptionCVE.org
[Fix various issues in unsafe operation/queries to the slurmdbd]
AnalysisAI
Multiple unsafe database operations and query-construction flaws in slurmdbd, the SLURM Workload Manager's accounting database daemon, allow authenticated cluster users or malicious slurmctld nodes to send crafted requests that result in unvalidated or improperly sanitized queries against the underlying database. The precise impact - whether SQL injection, privilege escalation within Slurm accounting, or data corruption - is not fully disclosed in available sources. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to the slurmdbd RPC port (default TCP 6819), which is typically restricted to within the HPC cluster's management network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk assessment is severely constrained by sparse input: no CVSS vector, no CWE, no EPSS, no KEV, no POC, and no advisory URL are available. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Ubuntu security update for the slurm-wlm or slurmdbd package as soon as it is available via 'apt update && apt upgrade slurmd slurmdbd'. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today