CVE-2013-4255

Source
https://nvd.nist.gov/vuln/detail/CVE-2013-4255
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-4255.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2013-4255
Related
Published
2013-10-11T22:55:39Z
Modified
2025-01-14T06:05:16.497509Z
Summary
[none]
Details

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANTVACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condorstartd exit) via a crafted job.

References

Affected packages

Debian:13 / condor

Package

Name
condor
Purl
pkg:deb/debian/condor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.0.5~dfsg.1-1

Affected versions

7.*

7.7.4+git3-gd7ce75b~dfsg.1-1
7.7.5~dfsg.1-2
7.7.6~dfsg.1-1
7.7.6~dfsg.1-2
7.7.6~dfsg.1-3
7.8.0~dfsg.1-1
7.8.0~dfsg.1-2
7.8.1~dfsg.1-1
7.8.1~dfsg.1-2
7.8.2~dfsg.1-1
7.8.2~dfsg.1-2
7.8.4~dfsg.1-1
7.8.6~dfsg.1-1
7.8.7~dfsg.1-1
7.8.8~dfsg.1-1
7.8.8~dfsg.1-2
7.8.8~dfsg.1-2.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}