CVE-2020-12658
Critical
Description
gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Gssproxy
PublishedDec 31, 2020
First seenDec 31, 2020
How to fix
Update
- gssproxy_project gssproxy0.8.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gssproxy_project gssproxy | v < 0.8.3 | 0.8.3 |
| debian debian_linux | 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.