CVE-2023-49933: High severity SchedMD Slurm vulnerability
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49933?
CVE-2023-49933 is categorized with a high severity due to the potential for attackers to modify RPC traffic.
How do I fix CVE-2023-49933?
To fix CVE-2023-49933, upgrade to Slurm versions 22.05.11, 23.02.7, or 23.11 onwards.
Which versions of Slurm are affected by CVE-2023-49933?
CVE-2023-49933 affects Slurm versions 22.05.x, 23.02.x, and 23.11.x up until the specified fixed versions.
What type of vulnerability is CVE-2023-49933?
CVE-2023-49933 is an improper enforcement vulnerability concerning message integrity during transmission.
Can CVE-2023-49933 be exploited remotely?
Yes, CVE-2023-49933 can be exploited remotely, allowing attackers to alter communication channel messages.