CVE-2009-5136

Published: Oct 11, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

Affected (10)

Products: Condor Project: Condor · Redhat: Enterprise Mrg

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Condor Project Condor	Up to 7.4.1
Condor Project Condor	Version 7.4.0

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Mrg	Version 1.0.1
Redhat Enterprise Mrg	Version 1.0.2
Redhat Enterprise Mrg	Version 1.0.3
Redhat Enterprise Mrg	Version 1.0
Redhat Enterprise Mrg	Version 1.1.1
Redhat Enterprise Mrg	Version 1.1.2
Redhat Enterprise Mrg	Version 1.2.2
Redhat Enterprise Mrg	Version 1.2