PatchTheCVEgssproxy vulnerabilities and fixes
Recent CVEs affecting gssproxy, with upgrade or downgrade steps. 1 tracked.
gssproxy has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-12-31. Highest priority: CVE-2020-12658 (score 64/100).
- CVE-2020-12658 CRITICAL 9.8 UPGRADE MITIGATE gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp
FAQ
How do I fix gssproxy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gssproxy being exploited right now?
None of the tracked gssproxy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gssproxy CVE should I patch first?
CVE-2020-12658 currently ranks highest (64/100): gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp.