Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The gssproxy daemon, a service that handles GSS-API security context requests for Kerberos-dependent applications, can be crashed by any local user sending a specific malformed request through its Unix socket. Because the daemon does not restart automatically, this causes a lasting denial of service for services that rely on it, such as Kerberized NFS and IdM.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no authentication, allowing any local user to crash the gssproxy daemon via its Unix socket. The daemon does not automatically restart, resulting in a persistent denial of service that also affects dependent services such as Kerberized NFS and IdM.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- gssproxy
Version range not reported
- gssproxy
Version range not reported
- gssproxy
Version range not reported
- gssproxy
Version range not reported
- openshift/ose-rhel-coreos-8
Version range not reported
- openshift/ose-rhel-coreos-9
Version range not reported