Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4…
Priority MEDIUM 46Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."
Why it matters now
EPSS 0.01679 77th percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:condor_project:condor:7.6.0:*:*:*:*:*:*:* | 7.6.0 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.1:*:*:*:*:*:*:* | 7.6.1 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.2:*:*:*:*:*:*:* | 7.6.2 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.3:*:*:*:*:*:*:* | 7.6.3 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.4:*:*:*:*:*:*:* | 7.6.4 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.5:*:*:*:*:*:*:* | 7.6.5 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.6:*:*:*:*:*:*:* | 7.6.6 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.7:*:*:*:*:*:*:* | 7.6.7 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.8:*:*:*:*:*:*:* | 7.6.8 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.6.9:*:*:*:*:*:*:* | 7.6.9 | Vulnerable | Condor Project |
- cpe:2.3:a:condor_project:condor:7.6.0:*:*:*:*:*:*:* Versions 7.6.0 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.1:*:*:*:*:*:*:* Versions 7.6.1 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.2:*:*:*:*:*:*:* Versions 7.6.2 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.3:*:*:*:*:*:*:* Versions 7.6.3 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.4:*:*:*:*:*:*:* Versions 7.6.4 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.5:*:*:*:*:*:*:* Versions 7.6.5 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.6:*:*:*:*:*:*:* Versions 7.6.6 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.7:*:*:*:*:*:*:* Versions 7.6.7 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.8:*:*:*:*:*:*:* Versions 7.6.8 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.6.9:*:*:*:*:*:*:* Versions 7.6.9 Vulnerable ·Condor Project
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:* | 7.8.0 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.8.1:*:*:*:*:*:*:* | 7.8.1 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.8.2:*:*:*:*:*:*:* | 7.8.2 | Vulnerable | Condor Project |
| cpe:2.3:a:condor_project:condor:7.8.3:*:*:*:*:*:*:* | 7.8.3 | Vulnerable | Condor Project |
- cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:* Versions 7.8.0 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.8.1:*:*:*:*:*:*:* Versions 7.8.1 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.8.2:*:*:*:*:*:*:* Versions 7.8.2 Vulnerable ·Condor Project
- cpe:2.3:a:condor_project:condor:7.8.3:*:*:*:*:*:*:* Versions 7.8.3 Vulnerable ·Condor Project
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise MRG 1 | Affected | No fix planned: Will not fix |
Not affected: 1 product
- Red Hat Enterprise MRG 2
Timeline
- 2026-10-02 Threatist record created from CVE-2012-5197
- 2026-10-03 Alias added: GHSA-fp78-87mw-cjm6
References
More Condor Project Condor vulnerabilities
- TI-2012-02945 Condor before 7.8.2 allows remote attackers to bypass host-based authentication and… CVSS 2.0HIGH 10.0
- TI-2012-04563 The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6… CVSS 2.0HIGH 10.0
- TI-2012-04382 Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors. CVSS 2.0HIGH 10.0
- TI-2008-03285 Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE… CVSS 2.0HIGH 7.5
- TI-2012-03020 The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before… CVSS 2.0MEDIUM 6.4
- TI-2009-03918 Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid… CVSS 2.0MEDIUM 6.5
Sources
- CVE-2012-5197 · CVE Program
- CVE-2012-5197 · NVD
- FIRST EPSS
- GHSA-fp78-87mw-cjm6 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-5197 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences