Unscored severity · published Oct 11, 2013
CVE-2013-4255
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Condor · Condor Project
through 8.0.0; 7.5.4 · source: NVD
EM
Enterprise Mrg · Redhat
2.0; 2.1; 2.2; 2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4255
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4255
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-1171.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-1172.html
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=919401
htcondor-wiki.cs.wisc.edu
https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1786
htcondor-wiki.cs.wisc.edu
https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=3829
More from Condor
–
CVE-2012-5390
The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote…
–
CVE-2011-4930
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local…
–
CVE-2009-5136
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote…
–
CVE-2012-4462
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square…
–
CVE-2012-5197
Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."