CVE-2012-4462: Input Validation
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condorschedd restart) via square brackets in the cproc option.
Other sources
Daniel Horák discovered that condorschedd would crash when attempting to remove a job via /usr/share/condor/aviary/jobcontrol.py with CPROC in square brackets (e.g. "jobcontrol.py --cmd=removeJob --cproc=[1.0]"). If the aviaryqueryserver is configured to listen to public interfaces, this could allow a remote attacker to cause a denial of service condition in condorschedd. While condorschedd will be restarted by the condormaster process after it exits, condormaster will throttle back restarts each crash. This will slowly increment to the defined MASTERBACKOFFCEILING value (defaults to 3600s, or 1 hour).
In the recommended configuration scenario (deployed in a secure manner to prevent the aviaryqueryserver being exposed to unauthenticated users), this DoS can only be triggered by authenticated users, however they do not need the ADMINISTRATOR privilege to cause condorschedd to halt.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4462?
CVE-2012-4462 is classified as a moderate severity vulnerability.
How do I fix CVE-2012-4462?
To fix CVE-2012-4462, upgrade to the patched versions of Condor and Red Hat Enterprise MRG as recommended by the vendor.
What systems are affected by CVE-2012-4462?
CVE-2012-4462 affects Condor version 7.8.0 and Red Hat Enterprise MRG version 2.3.
What type of vulnerability is CVE-2012-4462?
CVE-2012-4462 is a denial of service vulnerability that can lead to the crash of the condor_schedd process.
Who discovered CVE-2012-4462?
CVE-2012-4462 was discovered by security researcher Daniel Horák.