Condor Project : Security Vulnerabilities, CVEs, Published In 2014
The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.
Max CVSS
10.0
EPSS Score
0.52%
Published
2014-06-06
Updated
2014-06-09
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Max CVSS
4.4
EPSS Score
0.04%
Published
2014-02-10
Updated
2023-02-13
2 vulnerabilities found