CVE-2020-12658
Summary
| CVE | CVE-2020-12658 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-12-31 01:15:00 UTC |
|---|
| Updated | 2023-11-07 03:15:00 UTC |
|---|
| Description | ** DISPUTED ** gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem." |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Comparing v0.8.2...v0.8.3 · gssapi/gssproxy · GitHub |
MISC |
github.com |
Third Party Advisory |
| Unlock cond_mutex before pthread exit in gp_worker_main() · gssapi/gssproxy@cb76141 · GitHub |
MISC |
github.com |
Patch, Third Party Advisory |
| [SECURITY] [DLA 2516-1] gssproxy security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| Commit - gssproxy - cb761412e299ef907f22cd7c4146d50c8a792003 - Pagure.io |
MISC |
pagure.io |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 174872 SUSE Enterprise Linux Security Update for gssproxy (SUSE-SU-2021:1030-1)
- 174873 SUSE Enterprise Linux Security Update for gssproxy (SUSE-SU-2021:1029-1)
- 670179 EulerOS Security Update for gssproxy (EulerOS-SA-2021-1679)
- 670281 EulerOS Security Update for gssproxy (EulerOS-SA-2021-1795)
- 670918 EulerOS Security Update for gssproxy (EulerOS-SA-2021-1145)
- 750277 OpenSUSE Security Update for gssproxy (openSUSE-SU-2021:0531-1)
