Every CVE Search/ Get API key

CVE-2011-4930

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x...

4.4 MediumFix available

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

Exploit likelihood

0.59%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.4

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

Record
CVE-2011-4930
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-134
Updated
2026-11-02
CVE List No score

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

Record
CVE-2011-4930
Updated
2026-11-02
EUVDEUVD-2011-4840 No score

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

Record
EUVD-2011-4840
Updated
2026-11-03
GitHub AdvisoriesGHSA-xf2q-8pgg-943r No score

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x...

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

Record
GHSA-xf2q-8pgg-943r
Weakness
CWE-134
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
condor
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-classads
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-kbdd
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-qmf
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-wallaby-base-db
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:1.19-1.el6
0:1.19-1.el6
ruby-spqr
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.3.5-1.el6
0:0.3.5-1.el6
ruby-wallaby
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
spqr-gen
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.3.5-1.el6
0:0.3.5-1.el6
Show 41 moreShow less
Affected packages
PackageAffectedFixed
wallaby
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
wallaby-utils
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
condor
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-aviary
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-classads
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-ec2-enhanced
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.3.0-1.el6
0:1.3.0-1.el6
condor-ec2-enhanced-hooks
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.3.0-1.el6
0:1.3.0-1.el6
condor-kbdd
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-plumage
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-qmf
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.12.el6
0:7.6.5-0.12.el6
condor-wallaby-base-db
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.19-1.el6
0:1.19-1.el6
cumin
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.1.5192-1.el6
0:0.1.5192-1.el6
python-condorec2e
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.3.0-1.el6
0:1.3.0-1.el6
python-wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
ruby-spqr
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.3.5-1.el6
0:0.3.5-1.el6
ruby-wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
spqr-gen
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.3.5-1.el6
0:0.3.5-1.el6
wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
wallaby-utils
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-1.el6
0:0.12.5-1.el6
condor
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-aviary
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-classads
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-debuginfo
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-ec2-enhanced
Red Hat:enterprise_mrg:2::el5
 before 0:1.3.0-1.el5
0:1.3.0-1.el5
condor-ec2-enhanced-hooks
Red Hat:enterprise_mrg:2::el5
 before 0:1.3.0-1.el5
0:1.3.0-1.el5
condor-kbdd
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-qmf
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-vm-gahp
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.12.el5
0:7.6.5-0.12.el5
condor-wallaby-base-db
Red Hat:enterprise_mrg:2::el5
 before 0:1.19-1.el5
0:1.19-1.el5
cumin
Red Hat:enterprise_mrg:2::el5
 before 0:0.1.5192-1.el5
0:0.1.5192-1.el5
python-condorec2e
Red Hat:enterprise_mrg:2::el5
 before 0:1.3.0-1.el5
0:1.3.0-1.el5
python-wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-1.el5
0:0.12.5-1.el5
ruby-spqr
Red Hat:enterprise_mrg:2::el5
 before 0:0.3.5-1.el5
0:0.3.5-1.el5
ruby-wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-1.el5
0:0.12.5-1.el5
spqr-gen
Red Hat:enterprise_mrg:2::el5
 before 0:0.3.5-1.el5
0:0.3.5-1.el5
wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-1.el5
0:0.12.5-1.el5
wallaby-utils
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-1.el5
0:0.12.5-1.el5
python-psycopg2
Red Hat:enterprise_mrg:2::el5
 before 0:2.0.14-3.el5
0:2.0.14-3.el5
python-psycopg2-debuginfo
Red Hat:enterprise_mrg:2::el5
 before 0:2.0.14-3.el5
0:2.0.14-3.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4930 is a medium vulnerability (CVSS 4.4) in Condor Project Condor, published February 10, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in condor 0:7.6.5-0.12.el6.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open