https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2012-5390.htmlhttps://patchthecve.com/cve/CVE-2012-5390.htmlTue, 16 Jun 2026 23:46:47 +0000HIGH 10.0: The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.https://patchthecve.com/cve/CVE-2011-4930.htmlhttps://patchthecve.com/cve/CVE-2011-4930.htmlTue, 16 Jun 2026 23:35:39 +0000MEDIUM 4.4: Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code viahttps://patchthecve.com/cve/CVE-2013-4255.htmlhttps://patchthecve.com/cve/CVE-2013-4255.htmlTue, 16 Jun 2026 23:56:54 +0000LOW 3.5: The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denhttps://patchthecve.com/cve/CVE-2009-5136.htmlhttps://patchthecve.com/cve/CVE-2009-5136.htmlTue, 16 Jun 2026 23:15:08 +0000MEDIUM 4.0: The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.https://patchthecve.com/cve/CVE-2012-5197.htmlhttps://patchthecve.com/cve/CVE-2012-5197.htmlTue, 16 Jun 2026 23:46:25 +0000HIGH 10.0: Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."https://patchthecve.com/cve/CVE-2012-5196.htmlhttps://patchthecve.com/cve/CVE-2012-5196.htmlTue, 16 Jun 2026 23:46:25 +0000HIGH 10.0: Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.https://patchthecve.com/cve/CVE-2012-3493.htmlhttps://patchthecve.com/cve/CVE-2012-3493.htmlTue, 16 Jun 2026 23:43:20 +0000MEDIUM 5.8: The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.https://patchthecve.com/cve/CVE-2012-3492.htmlhttps://patchthecve.com/cve/CVE-2012-3492.htmlTue, 16 Jun 2026 23:43:19 +0000MEDIUM 6.4: The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.https://patchthecve.com/cve/CVE-2012-3491.htmlhttps://patchthecve.com/cve/CVE-2012-3491.htmlTue, 16 Jun 2026 23:43:19 +0000MEDIUM 4.0: src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.https://patchthecve.com/cve/CVE-2012-3416.htmlhttps://patchthecve.com/cve/CVE-2012-3416.htmlTue, 16 Jun 2026 23:43:10 +0000HIGH 10.0: Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.