CVE-2009-5136: Condor Project Condor

Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

Affected products

• Condor Project Condor: up to and including 7.4.1; version 7.4.0 only
• Red Hat Enterprise Mrg: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.1.1 only; version 1.1.2 only; …

Published 2013-10-11. Last modified 2026-06-16.