Summary
It was discovered that HTCondor incorrectly invoked the mailx utility. An
attacker could use this vulnerability to execute arbitrary commands. This
issue only affected Ubuntu 14.04 ESM. (CVE-2014-8126)
It was discovered that HTCondor mishandled certain crafted input. An
attacker could use this vulnerability to cause HTCondor to crash.
(CVE-2017-16816)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | condor | 8.0.5~dfsg.1-1ubuntu1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | condor | 8.4.2~dfsg.1-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.
-
Unscored —
The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause …