Lucene search

K
debianDebianDEBIAN:DLA-78-1:E1016
HistoryOct 27, 2014 - 8:48 p.m.

[SECURITY] [DLA 78-1] torque security update

2014-10-2720:48:40
lists.debian.org
7

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

76.2%

Package : torque
Version : 2.4.8+dfsg-9squeeze5
CVE ID : CVE-2014-3684

Chad Vizino reported a vulnerability in torque, a PBS-derived batch
processing queueing system. A non-root user could exploit the flaw in
the tm_adopt() library call to kill any process, including root-owned
ones on any node in a job.

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

76.2%