CVE-2018-10995: Debian Linux

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Schedmd Slurm: up to and including 17.02.10.1; version 17.11.0.0 only; version 17.11.0.1 only; version 17.11.1.1 only; version 17.11.1.2 only; version 17.11.2.1 only; …

Published 2018-05-30. Last modified 2026-06-17.