PT-2022-7559 · Gnutls+10 · Gnutls+10

Jaak Ristioja · Published 2022-07-07 · Updated 2024-07-17 · CVE-2022-2509

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GnuTLS (affected versions not specified)

Description A security flaw occurs due to a double free error during verification of pkcs7 signatures in the gnutls pkcs7 verify function. This issue allows a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALSA-2022:6854

ALSA-2022:7105

ALT-PU-2022-2336

ALT-PU-2022-2352

ALT-PU-2022-2422

ALT-PU-2023-1356

AZL-10439

BDU:2024-07315

CESA-2022_7105

CVE-2022-2509

DLA-3070-1

DSA-5203-1

MGASA-2022-0301

OESA-2022-1822

OPENSUSE-SU-2022:2882-1

OPENSUSE-SU-2022_2882-1

OPENSUSE-SU-2022_2919-1

OPENSUSE-SU-2024:12233-1

RHSA-2022:6854

RHSA-2022:7105

RHSA-2022_6854

RHSA-2022_7105

RLSA-2022:6854

RLSA-2022:7105

SUSE-SU-2022:2830-1

SUSE-SU-2022:2882-1

SUSE-SU-2022:2919-1

SUSE-SU-2022_2882-1

SUSE-SU-2022_2919-1

USN-5550-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Gnutls

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 71

• https://ubuntu.com/security/notices/USN-5550-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07315 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2022:2882-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-6854.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-2509 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:6854 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2509 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-2509 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5203-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:7105 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:6854 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/5NRKG3OBVPVFJTDYYF6SZH5KZIWFLVPW · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4209 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12233-1 · Vendor Advisory