CVE-2022-2509

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-2509

Severity

7.5

High

CVSS V3

Description

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

References

https://images.chainguard.dev/security/CGA-94w4-8p7j-rcjj
https://github.com/advisories/GHSA-w33j-4mrg-pgc3
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX/
https://access.redhat.com/security/cve/CVE-2022-2509
https://lists.debian.org/debian-lts-announce/2022/08/msg00002.html
https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html
https://www.debian.org/security/2022/dsa-5203

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2022-2509

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company