CVE-2017-16816

The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-07-05

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Htcondor (Wisc)

References

• http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html
• https://www-auth.cs.wisc.edu/lists/htcondor-users/2017-November/msg00022.shtml