The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Slurm | Llnl | * | 2.1.13 (including) |
| Slurm | Llnl | 1.3.10 (including) | 1.3.10 (including) |
| Slurm | Llnl | 1.3.11 (including) | 1.3.11 (including) |
| Slurm | Llnl | 1.3.12 (including) | 1.3.12 (including) |
| Slurm | Llnl | 1.3.13 (including) | 1.3.13 (including) |
| Slurm | Llnl | 1.3.14 (including) | 1.3.14 (including) |
| Slurm | Llnl | 1.3.15 (including) | 1.3.15 (including) |
| Slurm | Llnl | 2.0.0 (including) | 2.0.0 (including) |
| Slurm | Llnl | 2.0.1 (including) | 2.0.1 (including) |
| Slurm | Llnl | 2.0.2 (including) | 2.0.2 (including) |
| Slurm | Llnl | 2.0.3 (including) | 2.0.3 (including) |
| Slurm | Llnl | 2.0.4 (including) | 2.0.4 (including) |
| Slurm | Llnl | 2.0.5 (including) | 2.0.5 (including) |
| Slurm | Llnl | 2.0.6 (including) | 2.0.6 (including) |
| Slurm | Llnl | 2.0.7 (including) | 2.0.7 (including) |
| Slurm | Llnl | 2.0.8 (including) | 2.0.8 (including) |
| Slurm | Llnl | 2.0.9 (including) | 2.0.9 (including) |
| Slurm | Llnl | 2.1.0 (including) | 2.1.0 (including) |
| Slurm | Llnl | 2.1.1 (including) | 2.1.1 (including) |
| Slurm | Llnl | 2.1.2 (including) | 2.1.2 (including) |
| Slurm | Llnl | 2.1.4 (including) | 2.1.4 (including) |
| Slurm | Llnl | 2.1.5 (including) | 2.1.5 (including) |
| Slurm | Llnl | 2.1.6 (including) | 2.1.6 (including) |
| Slurm | Llnl | 2.1.7 (including) | 2.1.7 (including) |
| Slurm | Llnl | 2.1.8 (including) | 2.1.8 (including) |
| Slurm | Llnl | 2.1.9 (including) | 2.1.9 (including) |
| Slurm | Llnl | 2.1.10 (including) | 2.1.10 (including) |
| Slurm | Llnl | 2.1.11 (including) | 2.1.11 (including) |
| Slurm | Llnl | 2.1.12 (including) | 2.1.12 (including) |