Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Condor 拒绝服务漏洞
Vulnerability Description
Condor(现称HTCondor)是美国威斯康星大学麦迪逊分校所开发的一套用来管理计算密集型任务的批处理队列系统。该系统是通过一个高吞吐量的计算(HTC)环境实现的,并提供任务队列机制、调度策略等功能。 Condor 7.4.2之前的版本中的策略评估器中存在拒绝服务漏洞,该漏洞源于程序没有正确处理WANT_SUSPEND策略中的属性。远程服务器端用户可通过提交一个造成策略定义被评估为UNDEFINED状态的任务,利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A