| Package | Affected versions | Patched versions |
|---|---|---|
| condor | = 7.2.0= 7.2.1= 7.2.2= 7.2.3= 7.2.4= 7.2.5= 7.3.0= 7.3.1= 7.3.2= 7.4.0= 7.4.1= 7.4.2= 7.5.4= 7.6.0= 7.6.1= 7.6.2= 7.6.3= 7.6.4 |
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free