Описание
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
Отчет
The Red Hat Security Response Team has rated this issue as having low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise MRG 1 | condor | Will not fix | ||
| MRG for RHEL-5 v. 2 | condor | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | condor-ec2-enhanced | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | condor-ec2-enhanced-hooks | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | condor-job-hooks | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | condor-low-latency | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | condor-wallaby | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | condor-wallaby-base-db | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | cumin | Fixed | RHSA-2013:0564 | 06.03.2013 |
| MRG for RHEL-5 v. 2 | python-boto | Fixed | RHSA-2013:0564 | 06.03.2013 |
Показывать по
Дополнительная информация
Статус:
EPSS
3.5 Low
CVSS2
Связанные уязвимости
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, ...
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
EPSS
3.5 Low
CVSS2