CVE-2023-49936: Null Pointer Dereference
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SchedMD Slurmto a version that resolves this vulnerability.Fixed in 22.05.11 - Upgrade
Upgrade
SchedMD Slurmto a version that resolves this vulnerability.Fixed in 23.02.7 - Upgrade
Upgrade
SchedMD Slurmto a version that resolves this vulnerability.Fixed in 23.11.1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49936?
CVE-2023-49936 is classified as a denial of service vulnerability due to a NULL pointer dereference.
How do I fix CVE-2023-49936?
To fix CVE-2023-49936, upgrade to Slurm versions 22.05.11, 23.02.7, or 23.11.1.
Which versions of SchedMD Slurm are affected by CVE-2023-49936?
CVE-2023-49936 affects SchedMD Slurm versions 22.05.x, 23.02.x, and 23.11.x prior to the respective fixed versions.
Is CVE-2023-49936 exploitable remotely?
CVE-2023-49936 can lead to denial of service, which may be exploitable remotely depending on the specific configuration of Slurm.
What specific issue does CVE-2023-49936 address in SchedMD Slurm?
CVE-2023-49936 addresses a NULL pointer dereference that results in a denial of service condition.