Description
Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update request.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | condor +5 | 7.8.9-0.5.el5_9 | RHSA-2013:1295, RHSA-2013:1294 |
| Red Hat MRG 2 | condor-plumage +2 | 7.8.9-0.5.el6 | RHSA-2013:1294 |
| Red Hat MRG 2 | cumin | 0.1.5786-2.el5_9 | RHSA-2013:1295, RHSA-2013:1294 |
| Red Hat MRG 2 | mrg-release | 2.4.0-1.el5_9 | RHSA-2013:1295, RHSA-2013:1294 |
Advisories 2
- RHSA-2013:1294 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:1295 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- 1029122 vdb-entry
- RHSA-2013:1295 vendor-advisory
- RHSA-2013:1294 vendor-advisory