Published: 11/10/2013 Updated: 15/07/2021

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P

The policy definition evaluator in Condor 7.5.4, 8.0.0, and previous versions does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

Vulnerable Product	Search on Vulmon	Subscribe to Product
condor project condor 7.5.4
condor project condor
redhat enterprise mrg 2.1
redhat enterprise mrg 2.3
redhat enterprise mrg 2.0
redhat enterprise mrg 2.2

Debian Bug report logs - #721693 condor: CVE-2013-4255 Package: condor; Maintainer for condor is HTCondor Developers <condor-debian@cswiscedu>; Source for condor is src:condor (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Tue, 3 Sep 2013 06:18:02 UTC Severity: important Tags: securi ...

Synopsis Moderate: condor security update Type/Severity Security Advisory: Moderate Topic Updated condor packages that fix one security issue are now available forRed Hat Enterprise MRG 23 for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity imp ...

Synopsis Moderate: condor security update Type/Severity Security Advisory: Moderate Topic Updated condor packages that fix one security issue are now available forRed Hat Enterprise MRG 23 for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity imp ...

The policy definition evaluator in Condor 754, 800, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted ...

CWE-20 https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=3829 https://bugzilla.redhat.com/show_bug.cgi?id=919401 http://rhn.redhat.com/errata/RHSA-2013-1171.html https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1786 http://rhn.redhat.com/errata/RHSA-2013-1172.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721693 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-4255

CVE-2013-4255

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect