Back to Database
Status published
Critical
CVE-2014-0749
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and...
Vulnerability Description
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-0749
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/adaptivecomputing/torque/commit/3ed749263abe3d69fa3626d142a5789dcb5a5684
- https://labs.mwrinfosecurity.com/advisories/2014/05/14/torque-buffer-overflow
- https://github.com/adaptivecomputing/torque/pull/171
- http://packetstormsecurity.com/files/126651/Torque-2.5.13-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/33554
- http://www.securityfocus.com/archive/1/532110/100/0/threaded
- http://packetstormsecurity.com/files/126855/TORQUE-Resource-Manager-2.5.13-Buffer-Overflow.html
- http://www.securityfocus.com/bid/67420
- http://osvdb.org/show/osvdb/107024
- https://labs.mwrinfosecurity.com/system/assets/662/original/torque-buffer-overflow_2014-05-14.pdf
- http://www.debian.org/security/2014/dsa-2936
More from adaptivecomputing
View All →CVE-2014-5376
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when...
Medium
4
CVE-2014-5375
The server in Adaptive Computing Moab before 7.2.9 and 8...
Medium
4
CVE-2014-5300
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows...
Medium
5
CVE-2014-3684
The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and...
Medium
6.8
CVE-2013-4495
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and...
Critical
10
Affected Vendor
adaptivecomputing
View all reports →Affected Software
torque resource manager
Vulnerable Versions:
2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2.5.11, 2.5.12, 2.5.13
Timeline
Official Publish:
May 16th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.