CVE-2013-4255
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle...
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
Exploit likelihood
What each source reports
NVD Score used
3.5
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
CVE-2013-4255- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
CVE-2013-4255- Updated
- 2026-11-02
EUVDEUVD-2013-4157 No score
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
EUVD-2013-4157- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jm9x-cmw2-v945 No score
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle...
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
GHSA-jm9x-cmw2-v945- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
CVE-2013-4255- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4255 No score
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
DEBIAN-CVE-2013-4255- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4255 No score
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Record
UBUNTU-CVE-2013-4255- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorDebian:13 |
before 8.0.5~dfsg.1-1 | 8.0.5~dfsg.1-1 |
condorDebian:14 |
before 8.0.5~dfsg.1-1 | 8.0.5~dfsg.1-1 |
condorRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condor-aviaryRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condor-classadsRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condor-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condor-kbddRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condor-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condor-vm-gahpRed Hat:enterprise_mrg:2::el5 |
before 0:7.8.8-0.4.2.el5_9 | 0:7.8.8-0.4.2.el5_9 |
condorRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
condor-classadsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-kbddRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-qmfRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-vm-gahpRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condorRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-aviaryRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-classadsRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-cluster-resource-agentRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-deltacloud-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-kbddRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-plumageRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-qmfRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
condor-vm-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.8.8-0.4.3.el6_4 | 0:7.8.8-0.4.3.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4255 is a low vulnerability (CVSS 3.5) in Condor Project Condor, published October 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. Fixed in condor 8.0.5~dfsg.1-1.
References
rhn.redhat.com/errata/RHSA-2013-1172.html
htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1786
rhn.redhat.com/errata/RHSA-2013-1171.html
bugzilla.redhat.com/show_bug.cgi?id=919401
htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=3829
nvd.nist.gov/vuln/detail/CVE-2013-4255
Show 10 moreShow less
github.com/advisories/GHSA-jm9x-cmw2-v945
security-tracker.debian.org/tracker/CVE-2013-4255
access.redhat.com/errata/RHSA-2013:1171
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1171.json
access.redhat.com/security/cve/CVE-2013-4255
cve.org/CVERecord?id=CVE-2013-4255
access.redhat.com/errata/RHSA-2013:1172
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1172.json
ubuntu.com/security/CVE-2013-4255