CVE-2019-6438

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00090.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00016.html
https://lists.schedmd.com/pipermail/slurm-announce/2019/000018.htmlThird Party Advisory
https://www.schedmd.com/news.php?id=213Release Notes, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00090.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00016.html
https://lists.schedmd.com/pipermail/slurm-announce/2019/000018.htmlThird Party Advisory
https://www.schedmd.com/news.php?id=213Release Notes, Vendor Advisory

Timeline

Published: Jan 31, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-64399.8examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.CVE-2019-64409.8Zemana AntiMalware before 3.0.658 Beta mishandles update logic.CVE-2019-64419.8An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.CVE-2019-64426.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config re CVE-2019-64439.1An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in CVE-2019-64449.1An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-contr CVE-2019-64456.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control CVE-2019-64469.8An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrar CVE-2019-64478.1The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute appli CVE-2019-64517.5On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.CVE-2019-64528.8Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to o CVE-2019-64538.1mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify