« Volver al listado

CVE-2014-3684

Estado: ModificadaMedia (6.8)—

The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adaptivecomputing — Torque Resource Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3684",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-10-30T14:55:08.333",
  "references": [
    {
      "url": "http://advisories.mageia.org/MGASA-2014-0408.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159183.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159201.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159259.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2014/10/02/44",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2014/10/02/45",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/61350",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/61960",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-3058",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:124",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://advisories.mageia.org/MGASA-2014-0408.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159183.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159201.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159259.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2014/10/02/44",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2014/10/02/45",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/61350",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/61960",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2014/dsa-3058",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:124",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable."
    },
    {
      "lang": "es",
      "value": "La función tm_adopt en lib/Libifl/tm.c en Terascale Open-Source Resource and Queue Manager (también conocido como TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, y anteriores no valida que el dueño del proceso es además dueño de la sesión id adoptada, lo que permite a usuarios remotos autenticados matar procesos arbitrarios a través de un ejecutable manipulado."
    }
  ],
  "lastModified": "2026-06-17T00:08:44.927",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95226E07-3F24-458C-A42B-DDA00A0F7CA5"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A309E3F1-8453-438A-B05C-A02C2F295790"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F5ED7B6-C189-4CFE-9DE7-9160D4813BF5"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F6A6CB2-8C8C-47B5-9A4A-604C15CE1E27"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56C120C3-1971-4E5C-990E-3DC2DE148BE4"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5157ACD4-1418-4C8A-97D0-75C2FB977F9F"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CE0F6AC-617F-48CF-9238-94B0DEA26009"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BE54D15-3ED5-45EC-AB1B-651D9958859F"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E7567D8-CE3B-4B19-81C2-0B29535390D2"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:4.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6BB23AB-BBD7-40F4-A0DD-A78D0485488B"
            },
            {
              "criteria": "cpe:2.3:a:adaptivecomputing:torque_resource_manager:5.0.0-1_43d8f09a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A7919DB-431A-4F41-882C-DB582E226A53"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}