2 results · Feed
-
Medium 5.5
Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon
A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no authentication, allowin…
-
Unscored —
gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.…