CVE-2022-2509High· 7.5▾ TwilightA vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.0%
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
gnutls < 3.7.7enterprise_linux = 8.0enterprise_linux = 9.0fedora = 35debian_linux = 10.0debian_linux = 11.0Upgrade past the affected range:
gnutls 3.7.7Connected by shared product, vendor, weakness, or advisory.
CVE-2021-27645Low· 2.5The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Servi…
CVE-2021-22945Critical· 9.1When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
CVE-2021-4209Medium· 6.5A NULL pointer dereference flaw was found in GnuTLS
CVE-2021-20231Critical· 9.8A flaw was found in gnutls
CVE-2021-20232Critical· 9.8A flaw was found in gnutls
CVE-2020-24659High· 7.5An issue was discovered in GnuTLS before 3.6.15