CVE-2009-0128: plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm...

Security readout for executives and security teams

CVE-2009-0128 is a certificate validation flaw in SLURM/slurm-llnl’s OpenSSL crypto plugin. A remote attacker could potentially make malformed SSL/TLS signatures pass validation, undermining trust decisions. The source bundle does not provide affected versions, CVSS, or a named patch. Exposure is likely limited to historical SLURM/slurm-llnl deployments using the OpenSSL crypto plugin. The bundle lists no CPEs, affected versions, or supported-product mapping, so asset validation is required. Treat as an exposure-discovery item for legacy HPC or cluster environments. Prioritize if SLURM is internet-facing, crosses trust boundaries, or handles sensitive workloads, but evidence is incomplete. Mitigation focus: Inventory SLURM/slurm-llnl deployments and crypto plugin configuration.; Check upstream SLURM and Debian guidance for fixed packages or source patches.; Upgrade or retire unsupported SLURM builds where feasible..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.