CVE-2013-4255
Fixed in a distro release EPSS 2%
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
Products: condor_project condor, redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | condor | 8.0.5~dfsg.1-1 |
| Debian 14 | condor | 8.0.5~dfsg.1-1 |
| Red Hat enterprise mrg 2 | condor | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 | condor-aviary | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 | condor-classads | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 | condor-debuginfo | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 | condor-kbdd | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 | condor-qmf | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 | condor-vm-gahp | 0:7.8.8-0.4.2.el5_9 |
| Red Hat enterprise mrg 2 computenode el6 | condor | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 computenode el6 | condor-classads | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 computenode el6 | condor-debuginfo | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 computenode el6 | condor-kbdd | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 computenode el6 | condor-qmf | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 computenode el6 | condor-vm-gahp | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-aviary | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-classads | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-cluster-resource-agent | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-debuginfo | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-deltacloud-gahp | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-kbdd | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-plumage | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-qmf | 0:7.8.8-0.4.3.el6_4 |
| Red Hat enterprise mrg 2 server el6 | condor-vm-gahp | 0:7.8.8-0.4.3.el6_4 |