Total vulnerabilities in the database
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
| Software | From | Fixed in |
|---|---|---|
| condor_project / condor | - | 7.4.1.x |
| condor_project / condor | 7.4.0 | 7.4.0.x |
| redhat / enterprise_mrg | 1.1.2 | 1.1.2.x |
| redhat / enterprise_mrg | 1.0.3 | 1.0.3.x |
| redhat / enterprise_mrg | 1.2.2 | 1.2.2.x |
| redhat / enterprise_mrg | 1.1.1 | 1.1.1.x |
| redhat / enterprise_mrg | 1.0 | 1.0.x |
| redhat / enterprise_mrg | 1.0.2 | 1.0.2.x |
| redhat / enterprise_mrg | 1.0.1 | 1.0.1.x |
| redhat / enterprise_mrg | 1.2 | 1.2.x |