CVE-2020-36770

Summary

CVE-2020-36770 is a vulnerability affecting the Gentoo ebuild for Slurm up to version 22.05.3. The pkg_postinst script in this package inadvertently calls the chown function, which assigns root ownership on files in the live root filesystem. An attacker who gains access to the slurm user account could exploit this flaw to seize ownership of root-owned files, escalating their privileges within the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.