[USN-4781-2] Slurm vulnerabilities

[David Fernandez Gonzalez]

==========================================================================
Ubuntu Security Notice USN-4781-2
February 01, 2023

slurm-llnl vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM

Summary:

Several security issues were fixed in Slurm.

Software Description:
- slurm-llnl: Simple Linux Utility for Resource Management

Details:

USN-4781-1 fixed several vulnerabilities in Slurm. This update provides
the corresponding updates for Ubuntu 14.04 ESM (CVE-2016-10030) and
Ubuntu 16.04 ESM (CVE-2018-10995).

Original advisory details:

  It was discovered that Slurm incorrectly handled certain messages
  between the daemon and the user. An attacker could possibly use this
  issue to assume control of an arbitrary file on the system. This
  issue only affected Ubuntu 16.04 ESM.
  (CVE-2016-10030)

  It was discovered that Slurm mishandled SPANK environment variables.
  An attacker could possibly use this issue to gain elevated privileges.
  This issue only affected Ubuntu 16.04 ESM. (CVE-2017-15566)

  It was discovered that Slurm mishandled certain SQL queries. A local
  attacker could use this issue to gain elevated privileges. This
  issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and
  Ubuntu 18.04 ESM. (CVE-2018-7033)

  It was discovered that Slurm mishandled user names and group ids. A local
  attacker could use this issue to gain administrative privileges.
  This issue only affected Ubuntu 14.04 ESM and Ubuntu 18.04 ESM.
  (CVE-2018-10995)

  It was discovered that Slurm mishandled 23-bit systems. A local attacker
  could use this to gain administrative privileges. This issue only affected
  Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-6438)

  It was discovered that Slurm incorrectly handled certain inputs
  when Message Aggregation is enabled. An attacker could possibly
  use this issue to launch a process as an arbitrary user.
  This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM
  and Ubuntu 20.04 ESM. (CVE-2020-12693)

  It was discovered that Slurm incorrectly handled certain RPC inputs.
  An attacker could possibly use this issue to execute arbitrary code.
  This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.
  (CVE-2020-27745)

  Jonas Stare discovered that Slurm exposes sensitive information related
  to the X protocol. An attacker could possibly use this issue to obtain
  a graphical session from an arbitrary user. This issue only affected
  Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-27746)

  It was discovered that Slurm incorrectly handled environment parameters.
  An attacker could possibly use this issue to execute arbitrary code.
  (CVE-2021-31215)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   libpam-slurm                    15.08.7-1ubuntu0.1~esm5
   libpmi0                         15.08.7-1ubuntu0.1~esm5
   libslurm-perl                   15.08.7-1ubuntu0.1~esm5
   libslurm29                      15.08.7-1ubuntu0.1~esm5
   libslurmdb-perl                 15.08.7-1ubuntu0.1~esm5
   libslurmdb29                    15.08.7-1ubuntu0.1~esm5
   slurm-client                    15.08.7-1ubuntu0.1~esm5
   slurm-client-emulator           15.08.7-1ubuntu0.1~esm5
   slurm-llnl                      15.08.7-1ubuntu0.1~esm5
   slurm-llnl-slurmdbd             15.08.7-1ubuntu0.1~esm5
   slurm-wlm                       15.08.7-1ubuntu0.1~esm5
   slurm-wlm-basic-plugins         15.08.7-1ubuntu0.1~esm5
   slurm-wlm-emulator              15.08.7-1ubuntu0.1~esm5
   slurm-wlm-torque                15.08.7-1ubuntu0.1~esm5
   slurmctld                       15.08.7-1ubuntu0.1~esm5
   slurmd                          15.08.7-1ubuntu0.1~esm5
   slurmdbd                        15.08.7-1ubuntu0.1~esm5
   sview                           15.08.7-1ubuntu0.1~esm5

Ubuntu 14.04 ESM:
   libpam-slurm                    2.6.5-1ubuntu0.1~esm6
   libpmi0                         2.6.5-1ubuntu0.1~esm6
   libslurm-perl                   2.6.5-1ubuntu0.1~esm6
   libslurm26                      2.6.5-1ubuntu0.1~esm6
   libslurmdb-perl                 2.6.5-1ubuntu0.1~esm6
   libslurmdb26                    2.6.5-1ubuntu0.1~esm6
   slurm-llnl                      2.6.5-1ubuntu0.1~esm6
   slurm-llnl-basic-plugins        2.6.5-1ubuntu0.1~esm6
   slurm-llnl-slurmdbd             2.6.5-1ubuntu0.1~esm6
   slurm-llnl-sview                2.6.5-1ubuntu0.1~esm6
   slurm-llnl-torque               2.6.5-1ubuntu0.1~esm6

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-4781-2
   https://ubuntu.com/security/notices/USN-4781-1
   CVE-2016-10030, CVE-2018-10995

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x86A73CCF854ECB9A.asc
Type: application/pgp-keys
Size: 3191 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20230201/a56ece7e/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20230201/a56ece7e/attachment.sig>