Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-116497

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no authentication, allowing any local user to crash the gssproxy daemon via its Unix socket. The daemon does not automatically restart, resulting in a persistent denial of service that also affects dependent services such as Kerberized NFS and IdM.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gssproxy Project Red Hat Redhat
Products
Gssproxy Enterprise Linux Enterprise Linux and 3 more
CVE-2020-12658

gssproxy: not unlocking cond_mutex before pthread exit in gp_worker_main() in gp_workers.c

gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Debian Gssproxy Project
Products
Debian Linux Gssproxy