CVE-2009-5136

EUVD-2009-5091
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
condor_projectcondor
𝑥
≤ 7.4.1
condor_projectcondor
7.4.0
redhatenterprise_mrg
1.0
redhatenterprise_mrg
1.0.1
redhatenterprise_mrg
1.0.2
redhatenterprise_mrg
1.0.3
redhatenterprise_mrg
1.1.1
redhatenterprise_mrg
1.1.2
redhatenterprise_mrg
1.2
redhatenterprise_mrg
1.2.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
condor
sid
23.6.2+dfsg-2
fixed
trixie
23.6.2+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
condor
lucid
ignored
precise
dne
quantal
not-affected
raring
not-affected
saucy
not-affected