CVE catalog

CVE-2017-15566

Security update for slurm

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.58% · Oct 25, 2026

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuslurm-llnlpro14.11.8-4vulnerable
Ubuntuslurm-llnlpro15.08.4-1build1vulnerable
Ubuntuslurm-llnlpro15.08.4-1build2vulnerable
Ubuntuslurm-llnlpro15.08.7-1vulnerable
Ubuntuslurm-llnlpro15.08.7-1build1vulnerable
Ubuntuslurm-llnlpro15.08.7-1ubuntu0.1~esm3fixed
Debianslurm-llnl916.05.9-1vulnerable
Debianslurm-llnl916.05.9-1+deb9u1fixed
Susepdshlinux enterprise module for hpc 122.33-7.5.17fixed
Suseslurmlinux enterprise module for hpc 1217.02.9-6.10.1fixed
Suseslurmlibslinux enterprise module for hpc 1216.05.8.1-6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuslurm-llnldebpro15.08.7-1ubuntu0.1~esm3Not reportedUBUNTU-CVE-2017-15566Not reported
Debianslurm-llnldeb916.05.9-1+deb9u1Not reportedDSA-4023-1Not reported
Susepdshrpmlinux enterprise module for hpc 122.33-7.5.17Not reportedSUSE-SU-2017:3311-1Not reported
Suseslurmrpmlinux enterprise module for hpc 1217.02.9-6.10.1Not reportedSUSE-SU-2017:3311-1Not reported
Suseslurmlibsrpmlinux enterprise module for hpc 1216.05.8.1-6.1Not reportedSUSE-SU-2017:3311-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]