Red Hat Security AdvisoryRHSA-2013:1294
Red Hat Enterprise MRG Grid 2.4 security update
Released 2013-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor-7.8.9-0.5.el6, condor-classads-7.8.9-0.5.el6, condor-kbdd-7.8.9-0.5.el6 +3
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor-7.8.9-0.5.el6, condor-classads-7.8.9-0.5.el6, condor-kbdd-7.8.9-0.5.el6 +3
- Red Hat MRG Grid for RHEL 6 Server v.2 condor-7.8.9-0.5.el6, condor-aviary-7.8.9-0.5.el6, condor-classads-7.8.9-0.5.el6 +8
- Red Hat MRG Management for RHEL 6 ComputeNode v.2 mrg-release-2.4.0-1.el6
- Red Hat MRG Management for RHEL 6 Server v.2 cumin-0.1.5786-2.el6, mrg-release-2.4.0-1.el6
- Red Hat MRG Messaging for RHEL 6 Server v.2 mrg-release-2.4.0-1.el6
- Red Hat MRG Realtime for RHEL 6 Server v.2 mrg-release-2.4.0-1.el6
Fixes 1 record
Priority LOW 27
Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update request.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.024 · Published 2013-10-09 · Partial fix CWE-399
