CVE-2020-12658
CVE-2020-12658
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
31 Dec 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →