CVE-2020-27746

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.debian.org/security/2021/dsa-4841Third Party Advisory
https://www.schedmd.com/news.phpPatch, Vendor Advisory
https://www.debian.org/security/2021/dsa-4841Third Party Advisory
https://www.schedmd.com/news.phpPatch, Vendor Advisory

Timeline

Published: Nov 27, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-277476.8An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for enteri CVE-2020-277486.5A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be CVE-2020-277496.7A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their correspondi CVE-2020-27755.3Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte CVE-2020-277505.5A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is CVE-2020-277513.3A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick coul CVE-2020-277527.1A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick cou CVE-2020-277535.5There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially CVE-2020-277543.3In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller wh CVE-2020-277553.3in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the prop CVE-2020-277565.5In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead t CVE-2020-277573.3A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a