The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
15 Jul 2021, 19:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:enterprise_mrg:2.1:*:*:*:*:*:*:* cpe:2.3:a:redhat:enterprise_mrg:2.3:*:*:*:*:*:*:* |
cpe:2.3:o:redhat:enterprise_mrg:2.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_mrg:2.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_mrg:2.2:*:*:*:*:*:*:* |
Information
Published : 2013-10-11 22:55
Updated : 2024-02-04 18:16
NVD link : CVE-2013-4255
Mitre link : CVE-2013-4255
CVE.ORG link : CVE-2013-4255
JSON object : View
Products Affected
redhat
- enterprise_mrg
condor_project
- condor
CWE
CWE-20
Improper Input Validation