CVE-2009-5136

Condor < 7.4.2 - Authenticated Denial of Service via WANT_SUSPEND Policy

Title source: llm
STIX 2.1

Description

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

References (4)

Core 4
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=540545
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2010-0773.html

Scores

EPSS 0.0193
EPSS Percentile 77.6%

Details

CWE
CWE-20
Status published
Products (10)
condor_project/condor 7.4.0
condor_project/condor < 7.4.1
redhat/enterprise_mrg 1.0
redhat/enterprise_mrg 1.0.1
redhat/enterprise_mrg 1.0.2
redhat/enterprise_mrg 1.0.3
redhat/enterprise_mrg 1.1.1
redhat/enterprise_mrg 1.1.2
redhat/enterprise_mrg 1.2
redhat/enterprise_mrg 1.2.2
Published Oct 11, 2013
Tracked Since Feb 18, 2026