CVE-2023-41915 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-41915 Interim 1 4 2023-09-28T23:17:58Z current 2023-09-11T23:17:59Z 2023-09-28T23:17:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-41915 OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2023-September/031798.html E-Mail link for SUSE-SU-2023:3859-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for HPC 15 SP4 SUSE Linux Enterprise Module for HPC 15 SP5 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Tumbleweed libmca_common_dstore1 libmca_common_dstore1-3.2.3-11.1 libmca_common_dstore1-3.2.3-150300.3.8.1 libpmix2 libpmix2-3.2.3-11.1 libpmix2-3.2.3-150300.3.8.1 pmix pmix-3.2.3-11.1 pmix-3.2.3-150300.3.8.1 pmix-devel pmix-devel-3.2.3-11.1 pmix-devel-3.2.3-150300.3.8.1 pmix-headers pmix-headers-3.2.3-11.1 pmix-headers-3.2.3-150300.3.8.1 pmix-mca-params pmix-mca-params-3.2.3-11.1 pmix-mca-params-3.2.3-150300.3.8.1 pmix-plugin-munge pmix-plugin-munge-3.2.3-11.1 pmix-plugin-munge-3.2.3-150300.3.8.1 pmix-plugins pmix-plugins-3.2.3-11.1 pmix-plugins-3.2.3-150300.3.8.1 pmix-test pmix-test-3.2.3-11.1 pmix-test-3.2.3-150300.3.8.1 libmca_common_dstore1-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 libpmix2-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-devel-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-headers-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-mca-params-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-plugin-munge-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-plugins-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 pmix-test-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP4 libmca_common_dstore1-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 libpmix2-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-devel-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-headers-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-mca-params-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-plugin-munge-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-plugins-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 pmix-test-3.2.3-150300.3.8.1 as a component of SUSE Linux Enterprise Module for HPC 15 SP5 libmca_common_dstore1-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 libpmix2-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-devel-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-headers-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-mca-params-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-plugin-munge-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-plugins-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 pmix-test-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.4 libmca_common_dstore1-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 libpmix2-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-devel-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-headers-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-mca-params-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-plugin-munge-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-plugins-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 pmix-test-3.2.3-150300.3.8.1 as a component of openSUSE Leap 15.5 libmca_common_dstore1-3.2.3-11.1 as a component of openSUSE Tumbleweed libpmix2-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-devel-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-headers-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-mca-params-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-plugin-munge-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-plugins-3.2.3-11.1 as a component of openSUSE Tumbleweed pmix-test-3.2.3-11.1 as a component of openSUSE Tumbleweed libmca_common_dstore1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libpmix2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS pmix as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS pmix-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS pmix-headers as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS pmix-mca-params as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS pmix-plugins as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libmca_common_dstore1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libpmix2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pmix as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pmix-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pmix-headers as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pmix-mca-params as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pmix-plugins as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libmca_common_dstore1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libpmix2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix-headers as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix-mca-params as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix-plugin-munge as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix-plugins as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS pmix-test as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libmca_common_dstore1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libpmix2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix-headers as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix-mca-params as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix-plugin-munge as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix-plugins as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pmix-test as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0. CVE-2023-41915 SUSE Linux Enterprise Module for HPC 15 SP4:libmca_common_dstore1-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:libpmix2-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-devel-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-headers-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-mca-params-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-plugin-munge-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-plugins-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP4:pmix-test-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:libmca_common_dstore1-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:libpmix2-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-devel-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-headers-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-mca-params-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-plugin-munge-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-plugins-3.2.3-150300.3.8.1 SUSE Linux Enterprise Module for HPC 15 SP5:pmix-test-3.2.3-150300.3.8.1 openSUSE Leap 15.4:libmca_common_dstore1-3.2.3-150300.3.8.1 openSUSE Leap 15.4:libpmix2-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-devel-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-headers-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-mca-params-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-plugin-munge-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-plugins-3.2.3-150300.3.8.1 openSUSE Leap 15.4:pmix-test-3.2.3-150300.3.8.1 openSUSE Leap 15.5:libmca_common_dstore1-3.2.3-150300.3.8.1 openSUSE Leap 15.5:libpmix2-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-devel-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-headers-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-mca-params-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-plugin-munge-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-plugins-3.2.3-150300.3.8.1 openSUSE Leap 15.5:pmix-test-3.2.3-150300.3.8.1 openSUSE Tumbleweed:libmca_common_dstore1-3.2.3-11.1 openSUSE Tumbleweed:libpmix2-3.2.3-11.1 openSUSE Tumbleweed:pmix-3.2.3-11.1 openSUSE Tumbleweed:pmix-devel-3.2.3-11.1 openSUSE Tumbleweed:pmix-headers-3.2.3-11.1 openSUSE Tumbleweed:pmix-mca-params-3.2.3-11.1 openSUSE Tumbleweed:pmix-plugin-munge-3.2.3-11.1 openSUSE Tumbleweed:pmix-plugins-3.2.3-11.1 openSUSE Tumbleweed:pmix-test-3.2.3-11.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libmca_common_dstore1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libpmix2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:pmix SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:pmix-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:pmix-headers SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:pmix-mca-params SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:pmix-plugins SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libmca_common_dstore1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libpmix2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pmix SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pmix-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pmix-headers SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pmix-mca-params SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pmix-plugins SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libmca_common_dstore1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libpmix2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix-headers SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix-mca-params SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix-plugin-munge SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix-plugins SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:pmix-test SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libmca_common_dstore1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libpmix2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix-headers SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix-mca-params SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix-plugin-munge SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix-plugins SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pmix-test moderate 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L