{"id":"CVE-2018-10995","details":"SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).","modified":"2026-07-08T05:52:08.619945160Z","published":"2018-05-30T20:29:00.220Z","related":["SUSE-SU-2018:1652-1","SUSE-SU-2018:1925-1","SUSE-SU-2020:0434-1","SUSE-SU-2020:0443-1","SUSE-SU-2020:2607-1","SUSE-SU-2021:0773-1","openSUSE-SU-2024:11389-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00029.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00008.html"},{"type":"ADVISORY","url":"https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4254"},{"type":"ADVISORY","url":"https://www.schedmd.com/news.php?id=203"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/schedmd/slurm","events":[{"introduced":"0"},{"last_affected":"50227fa2079a94a3822e94950b9d128c432b21b0"},{"introduced":"46d8862cbe545e9d32bab84e8f12c824507a1038"},{"last_affected":"1d1a0a487aee9f2d957b71e442f228a8ae00f44a"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"17.02.10.1"},{"introduced":"17.11.0.0-pre1"},{"last_affected":"17.11.0.0-pre1"},{"introduced":"17.11.0.0-pre2"},{"last_affected":"17.11.0.0-pre2"},{"introduced":"17.11.0.0-rc1"},{"last_affected":"17.11.0.0-rc1"},{"introduced":"17.11.0.0-rc2"},{"last_affected":"17.11.0.0-rc2"},{"introduced":"17.11.0.0-rc3"},{"last_affected":"17.11.0.0-rc3"},{"introduced":"17.11.0.1"},{"last_affected":"17.11.0.1"},{"introduced":"17.11.1.1"},{"last_affected":"17.11.1.1"},{"introduced":"17.11.1.2"},{"last_affected":"17.11.1.2"},{"introduced":"17.11.2.1"},{"last_affected":"17.11.2.1"},{"introduced":"17.11.3.1"},{"last_affected":"17.11.3.1"},{"introduced":"17.11.3.2"},{"last_affected":"17.11.3.2"},{"introduced":"17.11.4.1"},{"last_affected":"17.11.4.1"},{"introduced":"17.11.5.1"},{"last_affected":"17.11.5.1"},{"introduced":"17.11.6.1"},{"last_affected":"17.11.6.1"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.0.0:pre1:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.0.0:pre2:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.0.0:rc2:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.1.1:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.1.2:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.2.1:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.3.1:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.3.2:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.4.1:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:schedmd:slurm:17.11.6.1:*:*:*:*:*:*:*"]}}],"versions":["17.11.0.0-pre1","17.11.0.0-pre2","17.11.0.0-rc1","17.11.0.0-rc2","17.11.0.0-rc3","17.11.0.1","17.11.1.1","17.11.1.2","17.11.2.1","17.11.3.1","17.11.3.2","17.11.4.1","17.11.5.1","17.11.6.1","slurm-17-11-6-1","slurm-17-11-5-1","slurm-17-02-10-1","slurm-17-11-4-1","slurm-17-11-3-2","slurm-17-11-3-1","slurm-17-11-2-1","slurm-17-11-1-2","slurm-17-11-1-1","slurm-17-11-0-1","slurm-17-11-0-0rc3","slurm-17-11-0-0rc2","slurm-17-02-9-1","slurm-17-11-0-0rc1","slurm-17-02-8-1","slurm-17-11-0-0pre2","slurm-17-02-7-1","slurm-17-02-6-1","slurm-17-11-0-0pre1","slurm-17-02-5-1","slurm-17-02-4-1","slurm-17-02-3-1","slurm-17-02-2-1","slurm-17-02-1-2","slurm-17-02-1-1","slurm-17-02-0-1","slurm-17-02-0-0rc1","slurm-17-02-0-0pre4","slurm-17-02-0-0pre3","slurm-17-02-0-0pre2","slurm-17-02-0-0pre1","slurm-16-05-0-0pre2","slurm-16-05-0-0pre1","slurm-15-08-0-1","slurm-15-08-0-0rc1","slurm-15-08-0-0pre6","slurm-15-08-0-0pre5","slurm-15-08-0-0pre4","slurm-15-08-0-0pre3","slurm-15-08-0-0pre2","slurm-15-08-0-0pre1","slurm-14-11-0-0rc1","slurm-14-11-0-0pre5","slurm-14-11-0-0pre4","slurm-14-11-0-0pre3","slurm-14-11-0-0pre2","slurm-14-11-0-0pre1","slurm-14-03-0-1","slurm-14-03-0-0rc1","slurm-14-03-0-0pre6","slurm-14-03-0-0pre5","slurm-13-12-0-0pre4","slurm-13-12-0-0pre3","slurm-13-12-0-0pre2","slurm-2-6-0-0rc2","slurm-2-6-0-0rc1","slurm-2-6-0-0pre4","slurm-2-6-0-0pre3","slurm-2-6-0-0pre2","slurm-2-6-0-0pre1","slurm-2-6-0-0-pre2","slurm-2-5-0-1","slurm-2-5-0-0-rc2","slurm-2-5-0-0-rc1","slurm-2-5-0-0-pre3","slurm-2-5-0-0-pre2","slurm-2-5-0-0-pre1","slurm-2-4-0-0-pre4","slurm-2-4-0-0-pre3","slurm-2-4-0-0-pre2","slurm-2-4-0-0-pre1","slurm-2-3-0-1","slurm-2-3-0-0-rc2","slurm-2-3-0-0-rc1","slurm-2-3-0-0-pre6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10995.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}