NVD

Id
39888  
Name
CVE-2013-4255  
Description
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-11  
Modified Date
2013-10-15  
Seq
2013-4255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202891 39888 CVE-2013-4255 RHSA-2013:1171  View
202892 39888 CVE-2013-4255 RHSA-2013:1172  View
202893 39888 CVE-2013-4255 https://bugzilla.redhat.com/show_bug.cgi?id=919401  View
202894 39888 CVE-2013-4255 https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1786  View
202895 39888 CVE-2013-4255 https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=3829  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23038 JVNDB-2013-004613 Condor のポリシー定義エバリュエータにおけるサービス運用妨害 (DoS) の脆弱性 Condor のポリシー定義エバリュエータ (policy definition evaluator) は、Unconfigured、Undefined、または Error 状態を評価する下記のポリシーの属性を適切に処理しないため、サービス運用妨害 (condor_startd の終了) 状態にされる脆弱性が存在します。 CVE-2013-4255 64197 CVE-2013-4255 39888 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004613.html 2013-08-21 2013-10-16 View