Skip to content
Fencer Intel
low 3.5

CVE-2013-4255 json

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3)…

published 2013-10-11 13 y ago modified 2026-06-16 4 mo ago also EUVD-2013-4157

cvss
3.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.6%
EPSS 1.6% chance of exploitation in 30 days, percentile 76%
public exploits
0
none known

Summary

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

Patch / fix

  • condor Debian 14, Debian 13 8.0.5~dfsg.1-1

debian advisories DEBIAN-CVE-2013-4255

  • condor enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-qmf enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-kbdd enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-aviary enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-plumage enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-vm-gahp enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-classads enterprise mrg 2 7.8.8-0.4.3.el6_4
  • condor-deltacloud-gahp enterprise mrg 2 7.8.8-0.4.3.el6_4

red hat advisories RHSA-2013:1172RHSA-2013:1171

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2013-4255 updated cvss 4.3

condor: condor_startd DoS when parsing policy definition that evaluates to ERROR or UNDEFINED

  • Red Hat Enterprise MRG 1 condor
    affected: no fix planned “Will not fix”
  • Red Hat MRG Grid Execute Node for RHEL 5 Server v.2 condor 7.8.8-0.4.2.el5_9, condor-qmf 7.8.8-0.4.2.el5_9, condor-kbdd 7.8.8-0.4.2.el5_9, condor-aviary 7.8.8-0.4.2.el5_9, condor-vm-gahp 7.8.8-0.4.2.el5_9, condor-classads 7.8.8-0.4.2.el5_9 Red Hat MRG Grid for RHEL 5 Server v.2 condor 7.8.8-0.4.2.el5_9, condor-qmf 7.8.8-0.4.2.el5_9, condor-kbdd 7.8.8-0.4.2.el5_9, condor-aviary 7.8.8-0.4.2.el5_9, condor-vm-gahp 7.8.8-0.4.2.el5_9, condor-classads 7.8.8-0.4.2.el5_9
    fixed: vendor fix RHSA-2013:1171
  • Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor 7.8.8-0.4.3.el6_4, condor-qmf 7.8.8-0.4.3.el6_4, condor-kbdd 7.8.8-0.4.3.el6_4, condor-aviary 7.8.8-0.4.3.el6_4, condor-plumage 7.8.8-0.4.3.el6_4, condor-vm-gahp 7.8.8-0.4.3.el6_4, +3 more Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor 7.8.8-0.4.3.el6_4, condor-qmf 7.8.8-0.4.3.el6_4, condor-kbdd 7.8.8-0.4.3.el6_4, condor-aviary 7.8.8-0.4.3.el6_4, condor-plumage 7.8.8-0.4.3.el6_4, condor-vm-gahp 7.8.8-0.4.3.el6_4, +3 more Red Hat MRG Grid for RHEL 6 Server v.2 condor 7.8.8-0.4.3.el6_4, condor-qmf 7.8.8-0.4.3.el6_4, condor-kbdd 7.8.8-0.4.3.el6_4, condor-aviary 7.8.8-0.4.3.el6_4, condor-plumage 7.8.8-0.4.3.el6_4, condor-vm-gahp 7.8.8-0.4.3.el6_4, +3 more
    fixed: vendor fix RHSA-2013:1172

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.64% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 3.5 AV:N/AC:M/Au:S/C:N/I:N/A:P

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.