CVE-2009-5136

2022-10-0316:24:01

mitre

www.cve.org

condor

policy evaluation

denial of service

6.1 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.