CVE catalog

CVE-2016-10030

Security update for slurm_20_11 and pdsh

Severity: High · CVSS 8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Jan 5, 2017, 11:59:00 AM UTC
Updated: Jun 29, 2026, 1:48:19 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.53% · Oct 25, 2026

USN-4781-1 fixed several vulnerabilities in Slurm. This update provides the corresponding updates for Ubuntu 14.04 ESM (CVE-2016-10030) and Ubuntu 16.04 ESM (CVE-2018-10995). Original advisory details: It was discovered that Slurm incorrectly handled certain messages between the daemon and the user. An attacker could possibly use this issue to assume control of an arbitrary file on the system. This issue only affected Ubuntu 16.04 ESM. (CVE-2016-10030) It was discovered that Slurm mishandled SPANK environment variables. An attacker could possibly use this issue to gain elevated privileges. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-15566) It was discovered that Slurm mishandled certain SQL queries. A local attacker could use this issue to gain elevated privileges. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-7033) It was discovered that Slurm mishandled user names and group ids. A local attacker could use this issue to gain administrative privileges. This issue only affected Ubuntu 14.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-10995) It was discovered that Slurm mishandled 23-bit systems. A local attacker could use this to gain administrative privileges. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-6438) It was discovered that Slurm incorrectly handled certain inputs when Message Aggregation is enabled. An attacker could possibly use this issue to launch a process as an arbitrary user. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-12693) It was discovered that Slurm incorrectly handled certain RPC inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-27745) Jonas Stare discovered that Slurm exposes sensitive information related to the X protocol. An attacker could possibly use this issue to obtain a graphical session from an arbitrary user. This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-27746) It was discovered that Slurm incorrectly handled environment parameters. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-31215)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	slurm-llnl	pro	`2.5.7-1`	vulnerable
Ubuntu	slurm-llnl	pro	`2.5.7-1build1`	vulnerable
Ubuntu	slurm-llnl	pro	`2.6.4-1ubuntu1`	vulnerable
Ubuntu	slurm-llnl	pro	`2.6.5-1`	vulnerable
Ubuntu	slurm-llnl	pro	`2.6.5-1ubuntu0.1~esm4`	vulnerable
Ubuntu	slurm-llnl	pro	`2.6.5-1ubuntu0.1~esm5`	vulnerable
Ubuntu	slurm-llnl	pro	`2.6.5-1ubuntu0.1~esm6`	fixed
Ubuntu	slurm-llnl	pro	`14.11.8-4`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.4-1build1`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.4-1build2`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1build1`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1ubuntu0.1~esm3`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1ubuntu0.1~esm4`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1ubuntu0.1~esm5`	fixed
Ubuntu	slurm-llnl	pro	`14.11.8-4`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.4-1build1`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.4-1build2`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1build1`	vulnerable
Ubuntu	slurm-llnl	pro	`15.08.7-1ubuntu0.1~esm3`	fixed
Debian	slurm-llnl	7	`2.3.4-2`	vulnerable
Debian	slurm-llnl	7	`2.3.4-2+deb7u1`	fixed
Opensuse	slurm	tumbleweed	`21.08.1-1.1`	fixed
Suse	pdsh	linux enterprise module for hpc 15	`2.33-7.6.1`	fixed
Suse	slurm_18_08	linux enterprise module for hpc 15	`18.08.9-1.5.2`	fixed
Suse	pdsh	linux enterprise module for hpc 15 sp1	`2.33-7.6.1`	fixed
Suse	pdsh	linux enterprise module for hpc 12	`2.33-7.18.1`	fixed
Suse	slurm_18_08	linux enterprise module for hpc 12	`18.08.9-3.5.1`	fixed
Suse	pdsh_slurm_18_08	linux enterprise module for hpc 12	`2.34-7.26.2`	fixed
Suse	pdsh_slurm_20_02	linux enterprise module for hpc 12	`2.34-7.26.2`	fixed
Suse	slurm_20_02	linux enterprise module for hpc 12	`20.02.3-3.5.1`	fixed
Suse	pdsh	linux enterprise module for hpc 12	`2.34-7.32.1`	fixed
Suse	pdsh_slurm_18_08	linux enterprise module for hpc 12	`2.34-7.32.1`	fixed
Suse	pdsh_slurm_20_02	linux enterprise module for hpc 12	`2.34-7.32.1`	fixed
Suse	pdsh_slurm_20_11	linux enterprise module for hpc 12	`2.34-7.32.1`	fixed
Suse	slurm_20_11	linux enterprise module for hpc 12	`20.11.4-3.5.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Ubuntu	slurm-llnl	deb	pro	`2.6.5-1ubuntu0.1~esm6`	Not reported	USN-4781-2	Not reported
Ubuntu	slurm-llnl	deb	pro	`15.08.7-1ubuntu0.1~esm5`	Not reported	USN-4781-2	Not reported
Ubuntu	slurm-llnl	deb	pro	`15.08.7-1ubuntu0.1~esm3`	Not reported	UBUNTU-CVE-2016-10030	Not reported
Debian	slurm-llnl	deb	7	`2.3.4-2+deb7u1`	Not reported	DLA-921-1	Not reported
Opensuse	slurm	rpm	tumbleweed	`21.08.1-1.1`	Not reported	OPENSUSE-SU-2024:11389-1	Not reported
Suse	pdsh	rpm	linux enterprise module for hpc 15	`2.33-7.6.1`	Not reported	SUSE-SU-2020:0443-1	Not reported
Suse	slurm_18_08	rpm	linux enterprise module for hpc 15	`18.08.9-1.5.2`	Not reported	SUSE-SU-2020:0443-1	Not reported
Suse	pdsh	rpm	linux enterprise module for hpc 15 sp1	`2.33-7.6.1`	Not reported	SUSE-SU-2020:0443-1	Not reported
Suse	pdsh	rpm	linux enterprise module for hpc 12	`2.33-7.18.1`	Not reported	SUSE-SU-2020:0434-1	Not reported
Suse	slurm_18_08	rpm	linux enterprise module for hpc 12	`18.08.9-3.5.1`	Not reported	SUSE-SU-2020:0434-1	Not reported
Suse	pdsh_slurm_18_08	rpm	linux enterprise module for hpc 12	`2.34-7.26.2`	Not reported	SUSE-SU-2020:2607-1	Not reported
Suse	pdsh_slurm_20_02	rpm	linux enterprise module for hpc 12	`2.34-7.26.2`	Not reported	SUSE-SU-2020:2607-1	Not reported
Suse	slurm_20_02	rpm	linux enterprise module for hpc 12	`20.02.3-3.5.1`	Not reported	SUSE-SU-2020:2607-1	Not reported
Suse	pdsh	rpm	linux enterprise module for hpc 12	`2.34-7.32.1`	Not reported	SUSE-SU-2021:0773-1	Not reported
Suse	pdsh_slurm_18_08	rpm	linux enterprise module for hpc 12	`2.34-7.32.1`	Not reported	SUSE-SU-2021:0773-1	Not reported
Suse	pdsh_slurm_20_02	rpm	linux enterprise module for hpc 12	`2.34-7.32.1`	Not reported	SUSE-SU-2021:0773-1	Not reported
Suse	pdsh_slurm_20_11	rpm	linux enterprise module for hpc 12	`2.34-7.32.1`	Not reported	SUSE-SU-2021:0773-1	Not reported
Suse	slurm_20_11	rpm	linux enterprise module for hpc 12	`20.11.4-3.5.1`	Not reported	SUSE-SU-2021:0773-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libnss_slurm2]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[libpmi0]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[libslurm44]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[perl-slurm]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-auth-none]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-config]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-config-man]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-cray]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-devel]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-doc]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-hdf5]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-lua]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-munge]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-node]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-openlava]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-pam_slurm]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-plugins]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-rest]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · x86_64 · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-seff]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed
[slurm-sjstat]Unknown
Source package: [slurm]
Details (1)
- 25.11.2-1.7 · noarch · tumbleweed
  Unknown · Fixed: 21.08.1-1.1
  Version impact unknown
  pypi · slurm · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:18:41 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]