CVE:CVE-2019-12838
CNNVD:CNNVD-201907-628
SchedMD Slurm是美国SchedMD公司的一套用于大型和小型Linux群集中的开源的和高度可扩展的集群管理和作业调度系统。
SchedMD Slurm 17.11.x版本、18.08.0版本至18.08.7版本和19.05.0版本中存在SQL注入漏洞。该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。
solution:Upgrade schedmd slurm to a higher version than 17.11.13.2,18.08.7,19.05.0,and avoid the version (17.11.0.0,17.11.13.2],(18.08.0,18.08.7],19.05.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1