A NULL pointer dereference vulnerability in gssproxy allows any local user to crash the daemon by sending a GSSX_INIT_SEC_CONTEXT request without the target_name field. This causes a denial of service affecting gssproxy and dependent services like Kerberized NFS and IdM. The issue is fixed in version 0.9.2-9.oe2403sp1.