Code injection

2013-10-1122:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

CPENameOperatorVersion
condorle7.4.1
condoreq7.4.0
enterprise_mrgeq1.1.2
enterprise_mrgeq1.0.3
enterprise_mrgeq1.2.2
enterprise_mrgeq1.1.1
enterprise_mrgeq1.0
enterprise_mrgeq1.0.2
enterprise_mrgeq1.0.1
enterprise_mrgeq1.2

Name	Operator	Version
condor	le	7.4.1
condor	eq	7.4.0
enterprise_mrg	eq	1.1.2
enterprise_mrg	eq	1.0.3
enterprise_mrg	eq	1.2.2
enterprise_mrg	eq	1.1.1
enterprise_mrg	eq	1.0
enterprise_mrg	eq	1.0.2
enterprise_mrg	eq	1.0.1
enterprise_mrg	eq	1.2