|
|
| |
|
| |
MRG Grid: denial of service
| Package(s): | MRG Grid |
CVE #(s): | CVE-2012-4462
|
| Created: | March 7, 2013 |
Updated: | March 13, 2013 |
| Description: |
From the Red Hat advisory:
It was found that attempting to remove a job via
"/usr/share/condor/aviary/jobcontrol.py" with CPROC in square brackets
caused condor_schedd to crash. If aviary_query_server was configured to
listen to public interfaces, this could allow a remote attacker to cause a
denial of service condition in condor_schedd. While condor_schedd was
restarted by the condor_master process after each exit, condor_master would
throttle back restarts after each crash. This would slowly increment to the
defined MASTER_BACKOFF_CEILING value (3600 seconds/1 hour, by default).
(CVE-2012-4462) |
| Alerts: |
|
( Log in to post comments)
|
|
|