Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
2014-02-10T18:15:09.310
2025-04-11T00:51:21.963
Deferred
CVSSv2: 4.4 (MEDIUM)
AV:L/AC:M/Au:N/C:P/I:P/A:P
3.4
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | condor_project | condor | 7.2.0 | Yes |
| Application | condor_project | condor | 7.2.1 | Yes |
| Application | condor_project | condor | 7.2.2 | Yes |
| Application | condor_project | condor | 7.2.3 | Yes |
| Application | condor_project | condor | 7.2.4 | Yes |
| Application | condor_project | condor | 7.2.5 | Yes |
| Application | condor_project | condor | 7.3.0 | Yes |
| Application | condor_project | condor | 7.3.1 | Yes |
| Application | condor_project | condor | 7.3.2 | Yes |
| Application | condor_project | condor | 7.4.0 | Yes |
| Application | condor_project | condor | 7.4.1 | Yes |
| Application | condor_project | condor | 7.4.2 | Yes |
| Application | condor_project | condor | 7.5.4 | Yes |
| Application | condor_project | condor | 7.6.0 | Yes |
| Application | condor_project | condor | 7.6.1 | Yes |
| Application | condor_project | condor | 7.6.2 | Yes |
| Application | condor_project | condor | 7.6.3 | Yes |
| Application | condor_project | condor | 7.6.4 | Yes |
| Operating System | fedoraproject | fedora | 15 | Yes |
| Operating System | fedoraproject | fedora | 16 | Yes |
| Operating System | redhat | enterprise_mrg | 1.3 | Yes |
| Operating System | redhat | enterprise_mrg | 2.0 | Yes |