VDB
CVE-2011-4930
CVE-2011-4930
PUBLISHED
CVSS 4.400000095367432 MEDIUM
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
EPSS 0.59% · 47.9th percentile
Risk Scores
CVSS 2.0
4.400000095367432
EPSS Score
0.59%
47.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| redhat | enterprise_mrg | 2.0, 1.3 |
| fedoraproject | fedora | 15, 16 |
| condor_project | condor | 7.2.4, 7.2.5, 7.3.0 |
Timeline
- Feb 10, 2014 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 30, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 16, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Feb 15, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 10, 2023 EPSS Score
References
- http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0001.html url
- RHSA-2012:0099 vendor-advisory
- https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=2660 url
- RHSA-2012:0100 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2011-4930 advisory
- https://htcondor-git.cs.wisc.edu/?p=condor.git;a=commitdiff;h=5e5571d1a431eb3c61977b6dd6ec90186ef79867 url
- https://htcondor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=5e5571d1a431eb3c61977b6dd6ec90186ef79867 technical
- https://htcondor-wiki.cs.wisc.edu/index.cgi/chngview?cn=28264 technical
- https://htcondor-wiki.cs.wisc.edu/index.cgi/chngview?cn=28429 technical
- https://bugzilla.redhat.com/show_bug.cgi?id=759548 technical