CVE-2009-0128: Llnl Slurm

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

Affected products

• Llnl Slurm: version _nil_ only

Published 2009-01-15. Last modified 2026-06-16.