CVE catalog

CVE-2021-43337

slurm-wlm: CVE-2021-43337

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.24% · Oct 25, 2026

SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianslurm-wlmsid26.05.5-1not affected
Debianslurm-wlmforky26.05.5-1not affected
Debianslurm-wlmtrixie24.11.5-4not affected
Debianslurm-wlmtrixie-security24.11.5-4+deb13u1not affected
Debianslurm-wlmbookworm22.05.8-4+deb12u3not affected
Debianslurm-wlmbookworm-security22.05.8-4+deb12u3not affected
Susepdshlinux enterprise high performance computing 15 sp2-espos2.34-150200.4.6.2fixed
Susepdsh_slurm_22_05linux enterprise high performance computing 15 sp2-espos2.34-150200.4.6.2fixed
Suseslurm_22_05linux enterprise high performance computing 15 sp2-espos22.05.5-150200.5.3.2fixed
Susepdshlinux enterprise high performance computing 15 sp2-ltss2.34-150200.4.6.2fixed
Susepdsh_slurm_22_05linux enterprise high performance computing 15 sp2-ltss2.34-150200.4.6.2fixed
Suseslurm_22_05linux enterprise high performance computing 15 sp2-ltss22.05.5-150200.5.3.2fixed
Opensusepdsh_slurm_20_11leap 15.32.34-150200.4.6.2fixed
Opensusepdsh_slurm_20_11leap 15.42.34-150200.4.6.2fixed
Susepdshlinux enterprise high performance computing 15 sp1-espos2.34-150100.10.14.1fixed
Susepdsh_slurm_20_02linux enterprise high performance computing 15 sp1-espos2.34-150100.10.14.1fixed
Susepdsh_slurm_22_05linux enterprise high performance computing 15 sp1-espos2.34-150100.10.14.1fixed
Suseslurm_22_05linux enterprise high performance computing 15 sp1-espos22.05.5-150100.3.3.1fixed
Susepdshlinux enterprise high performance computing 15 sp1-ltss2.34-150100.10.14.1fixed
Susepdsh_slurm_20_02linux enterprise high performance computing 15 sp1-ltss2.34-150100.10.14.1fixed
Susepdsh_slurm_22_05linux enterprise high performance computing 15 sp1-ltss2.34-150100.10.14.1fixed
Suseslurm_22_05linux enterprise high performance computing 15 sp1-ltss22.05.5-150100.3.3.1fixed
Opensusepdsh_slurm_20_02leap 15.32.34-150100.10.14.1fixed
Opensusepdsh_slurm_20_02leap 15.42.34-150100.10.14.1fixed
Susepdshlinux enterprise module for hpc 15 sp32.34-150300.35.2fixed
Susepdsh_slurm_22_05linux enterprise module for hpc 15 sp32.34-150300.35.2fixed
Suseslurm_22_05linux enterprise module for hpc 15 sp322.05.5-150300.7.3.2fixed
Susepdshlinux enterprise module for hpc 15 sp42.34-150300.35.2fixed
Susepdsh_slurm_22_05linux enterprise module for hpc 15 sp42.34-150300.35.2fixed
Suseslurm_22_05linux enterprise module for hpc 15 sp422.05.5-150300.7.3.2fixed
Opensusepdshleap 15.32.34-150300.35.2fixed
Opensusepdsh_slurm_22_05leap 15.32.34-150300.35.2fixed
Opensuseslurm_22_05leap 15.322.05.5-150300.7.3.2fixed
Opensusepdshleap 15.42.34-150300.35.2fixed
Opensusepdsh_slurm_22_05leap 15.42.34-150300.35.2fixed
Opensuseslurm_22_05leap 15.422.05.5-150300.7.3.2fixed
Susepdshlinux enterprise module for hpc 122.34-7.35.2fixed
Susepdsh_slurm_18_08linux enterprise module for hpc 122.34-7.35.3fixed
Susepdsh_slurm_20_02linux enterprise module for hpc 122.34-7.35.3fixed
Susepdsh_slurm_20_11linux enterprise module for hpc 122.34-7.35.3fixed
Susepdsh_slurm_22_05linux enterprise module for hpc 122.34-7.35.5fixed
Suseslurm_22_05linux enterprise module for hpc 1222.05.5-3.3.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianslurm-wlmsourcesidNot affectedunimportantNot reportedNot reported
Debianslurm-wlmsourceforkyNot affectedunimportantNot reportedNot reported
Debianslurm-wlmsourcetrixieNot affectedunimportantNot reportedNot reported
Debianslurm-wlmsourcebookwormNot affectedunimportantNot reportedNot reported
Susepdshrpmlinux enterprise high performance computing 15 sp2-espos2.34-150200.4.6.2Not reportedSUSE-RU-2022:4362-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise high performance computing 15 sp2-espos2.34-150200.4.6.2Not reportedSUSE-RU-2022:4362-1Not reported
Suseslurm_22_05rpmlinux enterprise high performance computing 15 sp2-espos22.05.5-150200.5.3.2Not reportedSUSE-RU-2022:4362-1Not reported
Susepdshrpmlinux enterprise high performance computing 15 sp2-ltss2.34-150200.4.6.2Not reportedSUSE-RU-2022:4362-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise high performance computing 15 sp2-ltss2.34-150200.4.6.2Not reportedSUSE-RU-2022:4362-1Not reported
Suseslurm_22_05rpmlinux enterprise high performance computing 15 sp2-ltss22.05.5-150200.5.3.2Not reportedSUSE-RU-2022:4362-1Not reported
Opensusepdsh_slurm_20_11rpmleap 15.32.34-150200.4.6.2Not reportedSUSE-RU-2022:4362-1Not reported
Opensusepdsh_slurm_20_11rpmleap 15.42.34-150200.4.6.2Not reportedSUSE-RU-2022:4362-1Not reported
Susepdshrpmlinux enterprise high performance computing 15 sp1-espos2.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Susepdsh_slurm_20_02rpmlinux enterprise high performance computing 15 sp1-espos2.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise high performance computing 15 sp1-espos2.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Suseslurm_22_05rpmlinux enterprise high performance computing 15 sp1-espos22.05.5-150100.3.3.1Not reportedSUSE-RU-2022:4297-1Not reported
Susepdshrpmlinux enterprise high performance computing 15 sp1-ltss2.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Susepdsh_slurm_20_02rpmlinux enterprise high performance computing 15 sp1-ltss2.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise high performance computing 15 sp1-ltss2.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Suseslurm_22_05rpmlinux enterprise high performance computing 15 sp1-ltss22.05.5-150100.3.3.1Not reportedSUSE-RU-2022:4297-1Not reported
Opensusepdsh_slurm_20_02rpmleap 15.32.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Opensusepdsh_slurm_20_02rpmleap 15.42.34-150100.10.14.1Not reportedSUSE-RU-2022:4297-1Not reported
Susepdshrpmlinux enterprise module for hpc 15 sp32.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise module for hpc 15 sp32.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Suseslurm_22_05rpmlinux enterprise module for hpc 15 sp322.05.5-150300.7.3.2Not reportedSUSE-RU-2022:4361-1Not reported
Susepdshrpmlinux enterprise module for hpc 15 sp42.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise module for hpc 15 sp42.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Suseslurm_22_05rpmlinux enterprise module for hpc 15 sp422.05.5-150300.7.3.2Not reportedSUSE-RU-2022:4361-1Not reported
Opensusepdshrpmleap 15.32.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Opensusepdsh_slurm_22_05rpmleap 15.32.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Opensuseslurm_22_05rpmleap 15.322.05.5-150300.7.3.2Not reportedSUSE-RU-2022:4361-1Not reported
Opensusepdshrpmleap 15.42.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Opensusepdsh_slurm_22_05rpmleap 15.42.34-150300.35.2Not reportedSUSE-RU-2022:4361-1Not reported
Opensuseslurm_22_05rpmleap 15.422.05.5-150300.7.3.2Not reportedSUSE-RU-2022:4361-1Not reported
Susepdshrpmlinux enterprise module for hpc 122.34-7.35.2Not reportedSUSE-RU-2022:4348-1Not reported
Susepdsh_slurm_18_08rpmlinux enterprise module for hpc 122.34-7.35.3Not reportedSUSE-RU-2022:4348-1Not reported
Susepdsh_slurm_20_02rpmlinux enterprise module for hpc 122.34-7.35.3Not reportedSUSE-RU-2022:4348-1Not reported
Susepdsh_slurm_20_11rpmlinux enterprise module for hpc 122.34-7.35.3Not reportedSUSE-RU-2022:4348-1Not reported
Susepdsh_slurm_22_05rpmlinux enterprise module for hpc 122.34-7.35.5Not reportedSUSE-RU-2022:4348-1Not reported
Suseslurm_22_05rpmlinux enterprise module for hpc 1222.05.5-3.3.5Not reportedSUSE-RU-2022:4348-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libpam-slurm]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libpmi0]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libpmi0-dev]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libpmi2-0]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libpmi2-0-dev]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libslurm38]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libslurm-dev]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [libslurm-perl]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurm-client]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurmctld]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurmd]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurmdbd]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurmrestd]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurm-wlm]Unknown
    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · amd64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · amd64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · arm64 · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

  • [slurm-wlm-doc]Unknown

    Source package: [slurm-wlm]

    Details (4)
    • 22.05.8-4+deb12u3 · all · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · all · bookworm

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · all · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

    • 22.05.8-4+deb12u3 · all · bookworm-security

      Not affected

      dsa · slurm-wlm · debian · bookworm

Next results

Observed:

References