{"id":"CVE-2023-49935","aliases":["DEBIAN-CVE-2023-49935","EUVD-2023-53830","GHSA-r926-qjg2-q5jr","SUSE-SU-2024:0280-1","SUSE-SU-2024:0284-1","SUSE-SU-2024:0289-1","SUSE-SU-2024:0312-1","UBUNTU-CVE-2023-49935","openSUSE-SU-2024:13559-1"],"status":"published","title":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control...","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0104,"percentile":0.64277,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-613"],"published":"2023-12-14T00:00:00Z","modified":"2026-10-28T02:30:36Z","fixes":[{"ecosystem":"Debian:13","package":"slurm-wlm","fixed_in":["23.11.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"slurm-wlm","fixed_in":["23.11.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.11.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"slurm-wlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.11.3-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150300.7.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150300.7.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150300.7.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150500.5.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150500.5.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"slurm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150500.5.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-150200.5.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 12","package":"slurm_23_02","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.7-3.16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.7-1","2.5.7-1build1","2.6.4-1ubuntu1","2.6.5-1","2.6.5-1ubuntu0.1~esm4","2.6.5-1ubuntu0.1~esm5","2.6.5-1ubuntu0.1~esm6","2.6.5-1ubuntu0.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["14.11.8-4","15.08.4-1build1","15.08.4-1build2","15.08.7-1","15.08.7-1build1","15.08.7-1ubuntu0.1~esm3","15.08.7-1ubuntu0.1~esm4","15.08.7-1ubuntu0.1~esm5","15.08.7-1ubuntu0.1~esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.02.6-1build1","17.02.9-1","17.11.2-1build1","17.11.2-1ubuntu0.1~esm3","17.11.2-1ubuntu0.1~esm4","17.11.2-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"slurm-llnl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["19.05.3.2-2","19.05.3.2-2build1","19.05.5-1","19.05.5-1ubuntu0.1~esm1","19.05.5-1ubuntu0.1~esm2"]}],"products":[{"vendor":"schedmd","product":"slurm"}],"references":[{"url":"https://www.schedmd.com/security-archive.php","tags":["x_transferred","Vendor Advisory","web","report"]},{"url":"https://lists.schedmd.com/pipermail/slurm-announce/2023/000103.html","tags":["x_transferred","Mailing List","Vendor Advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49935","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63FEDDYEE2WK7FHWBHKON3OZVQI56WSQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYQS3LFGC4HE4WCW4L3NAA2I6FRIWMNO"},{"url":"https://github.com/advisories/GHSA-r926-qjg2-q5jr"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49935.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-49935","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240280-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216869","tags":["report"]},{"url":"https://bugzilla.suse.com/1217711","tags":["report"]},{"url":"https://bugzilla.suse.com/1218046","tags":["report"]},{"url":"https://bugzilla.suse.com/1218049","tags":["report"]},{"url":"https://bugzilla.suse.com/1218050","tags":["report"]},{"url":"https://bugzilla.suse.com/1218051","tags":["report"]},{"url":"https://bugzilla.suse.com/1218053","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49938","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240284-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240289-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240312-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49935","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49935","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-49935","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T00:00:00Z","modified":"2025-11-04T18:20:08.93Z","updated_at":"2026-11-02T14:35:12.998024Z"}],"euvd":[{"id":"EUVD-2023-53830","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T00:00:00Z","modified":"2025-11-04T18:20:08Z","updated_at":"2026-11-02T19:49:24.151242Z"}],"ghsa":[{"id":"GHSA-r926-qjg2-q5jr","title":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control...","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T06:30:44Z","modified":"2025-11-04T21:31:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T15:04:38.133233Z"}],"nvd":[{"id":"CVE-2023-49935","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T05:15:10.49Z","modified":"2026-06-17T06:36:44.24Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:08:54.696438Z"}],"osv":[{"id":"DEBIAN-CVE-2023-49935","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T05:15:10.49Z","modified":"2026-10-26T18:02:50.334854756Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"UBUNTU-CVE-2023-49935","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T05:15:00Z","modified":"2026-04-27T18:46:42.479994Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"CVE-2023-49935","description":"An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.","status":"published","published":"2023-12-14T00:00:00Z","modified":"2026-10-28T02:30:36.353339842Z","updated_at":"2026-11-02T15:44:34.72355Z"},{"id":"openSUSE-SU-2024:13559-1","title":"libnss_slurm2-23.02.7-1.1 on GA media","description":"These are all security issues fixed in the libnss_slurm2-23.02.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:07:26.095454Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2024:0280-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\nUpdate to slurm 23.02.6:\n\nSecurity fixes:\n\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. (bsc#1218049)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-01-31T07:33:39Z","modified":"2026-02-04T03:17:26.106228Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0284-1","title":"Security update for slurm","description":"This update for slurm fixes the following issues:\n\nUpdate to slurm 23.02.6:\n\nSecurity fixes:\n\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. (bsc#1218049)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-01-31T10:03:48Z","modified":"2026-02-04T03:31:20.598373Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0289-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\nUpdate to slurm 23.02.6:\n\nSecurity fixes:\n\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. (bsc#1218049)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-01-31T11:03:53Z","modified":"2026-02-04T03:32:18.428778Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0312-1","title":"Security update for slurm_23_02","description":"This update for slurm_23_02 fixes the following issues:\n\nUpdate to slurm 23.02.6:\n\nSecurity fixes:\n\n- CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. (bsc#1218046)\n- CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. (bsc#1218049)\n- CVE-2023-49936: Prevent NULL pointer dereference on `size_valp` overflow. (bsc#1218050)\n- CVE-2023-49937: Prevent double-xfree() on error in `_unpack_node_reg_resp()`. (bsc#1218051)\n- CVE-2023-49938: Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. (bsc#1218053)\n\nOther fixes:\n\n- Add missing service file for slurmrestd (bsc#1217711).\n- Fix slurm upgrading to incompatible versions (bsc#1216869).\n","status":"published","published":"2024-02-02T05:03:43Z","modified":"2026-02-04T02:52:24.912773Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}