Vulnerabilities > CVE-2022-2509 - Double Free vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2022-08-01

Updated: 2023-11-07

Summary

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

Vulnerable Configurations

Part	Description	Count
Application	Gnu GNU Gnutls - GNU Gnutls 1.0.16 GNU Gnutls 1.0.17 GNU Gnutls 1.0.18 GNU Gnutls 1.0.19 GNU Gnutls 1.0.20 GNU Gnutls 1.0.21 GNU Gnutls 1.0.22 GNU Gnutls 1.0.23 GNU Gnutls 1.0.24 GNU Gnutls 1.0.25 GNU Gnutls 1.1.13 GNU Gnutls 1.1.14 GNU Gnutls 1.1.15 GNU Gnutls 1.1.16 GNU Gnutls 1.1.17 GNU Gnutls 1.1.18 GNU Gnutls 1.1.19 GNU Gnutls 1.1.20 GNU Gnutls 1.1.21 GNU Gnutls 1.1.22 GNU Gnutls 1.1.23 GNU Gnutls 1.2.0 GNU Gnutls 1.2.1 GNU Gnutls 1.2.2 GNU Gnutls 1.2.3 GNU Gnutls 1.2.4 GNU Gnutls 1.2.5 GNU Gnutls 1.2.6 GNU Gnutls 1.2.7 GNU Gnutls 1.2.8 GNU Gnutls 1.2.8.1A1 GNU Gnutls 1.2.9 GNU Gnutls 1.2.10 GNU Gnutls 1.2.11 GNU Gnutls 1.3.0 GNU Gnutls 1.3.1 GNU Gnutls 1.3.2 GNU Gnutls 1.3.3 GNU Gnutls 1.3.4 GNU Gnutls 1.3.5 GNU Gnutls 1.4.0 GNU Gnutls 1.4.1 GNU Gnutls 1.4.2 GNU Gnutls 1.4.3 GNU Gnutls 1.4.4 GNU Gnutls 1.4.5 GNU Gnutls 1.5.0 GNU Gnutls 1.5.1 GNU Gnutls 1.5.2 GNU Gnutls 1.5.3 GNU Gnutls 1.5.4 GNU Gnutls 1.5.5 GNU Gnutls 1.6.0 GNU Gnutls 1.6.1 GNU Gnutls 1.6.2 GNU Gnutls 1.6.3 GNU Gnutls 1.7.0 GNU Gnutls 1.7.1 GNU Gnutls 1.7.2 GNU Gnutls 1.7.3 GNU Gnutls 1.7.4 GNU Gnutls 1.7.5 GNU Gnutls 1.7.6 GNU Gnutls 1.7.7 GNU Gnutls 1.7.8 GNU Gnutls 1.7.9 GNU Gnutls 1.7.10 GNU Gnutls 1.7.11 GNU Gnutls 1.7.12 GNU Gnutls 1.7.13 GNU Gnutls 1.7.14 GNU Gnutls 1.7.15 GNU Gnutls 1.7.16 GNU Gnutls 1.7.17 GNU Gnutls 1.7.18 GNU Gnutls 1.7.19 GNU Gnutls 2.0.0 GNU Gnutls 2.0.1 GNU Gnutls 2.0.2 GNU Gnutls 2.0.3 GNU Gnutls 2.0.4 GNU Gnutls 2.1.0 GNU Gnutls 2.1.1 GNU Gnutls 2.1.2 GNU Gnutls 2.1.3 GNU Gnutls 2.1.4 GNU Gnutls 2.1.5 GNU Gnutls 2.1.6 GNU Gnutls 2.1.7 GNU Gnutls 2.1.8 GNU Gnutls 2.2.0 GNU Gnutls 2.2.1 GNU Gnutls 2.2.2 GNU Gnutls 2.2.3 GNU Gnutls 2.2.4 GNU Gnutls 2.2.5 GNU Gnutls 2.3.0 GNU Gnutls 2.3.1 GNU Gnutls 2.3.2 GNU Gnutls 2.3.3 GNU Gnutls 2.3.4 GNU Gnutls 2.3.5 GNU Gnutls 2.3.6 GNU Gnutls 2.3.7 GNU Gnutls 2.3.8 GNU Gnutls 2.3.9 GNU Gnutls 2.3.10 GNU Gnutls 2.3.11 GNU Gnutls 2.4.0 GNU Gnutls 2.4.1 GNU Gnutls 2.4.2 GNU Gnutls 2.4.3 GNU Gnutls 2.5.0 GNU Gnutls 2.6.0 GNU Gnutls 2.6.1 GNU Gnutls 2.6.2 GNU Gnutls 2.6.3 GNU Gnutls 2.6.4 GNU Gnutls 2.6.5 GNU Gnutls 2.6.6 GNU Gnutls 2.7.0 GNU Gnutls 2.7.1 GNU Gnutls 2.7.2 GNU Gnutls 2.7.3 GNU Gnutls 2.7.4 GNU Gnutls 2.7.5 GNU Gnutls 2.7.6 GNU Gnutls 2.8.0 GNU Gnutls 2.8.1 GNU Gnutls 2.8.2 GNU Gnutls 2.8.3 GNU Gnutls 2.8.4 GNU Gnutls 2.8.5 GNU Gnutls 2.8.6 GNU Gnutls 2.10.0 GNU Gnutls 2.10.1 GNU Gnutls 2.10.2 GNU Gnutls 2.10.3 GNU Gnutls 2.10.4 GNU Gnutls 2.10.5 GNU Gnutls 2.12.0 GNU Gnutls 2.12.1 GNU Gnutls 2.12.2 GNU Gnutls 2.12.3 GNU Gnutls 2.12.4 GNU Gnutls 2.12.5 GNU Gnutls 2.12.6 GNU Gnutls 2.12.6.1 GNU Gnutls 2.12.7 GNU Gnutls 2.12.8 GNU Gnutls 2.12.9 GNU Gnutls 2.12.10 GNU Gnutls 2.12.11 GNU Gnutls 2.12.12 GNU Gnutls 2.12.13 GNU Gnutls 2.12.14 GNU Gnutls 2.12.15 GNU Gnutls 2.12.16 GNU Gnutls 2.12.17 GNU Gnutls 2.12.18 GNU Gnutls 2.12.19 GNU Gnutls 2.12.20 GNU Gnutls 2.12.21 GNU Gnutls 2.12.22 GNU Gnutls 2.12.23 GNU Gnutls 2.12.24 GNU Gnutls 3.0 GNU Gnutls 3.0.0 GNU Gnutls 3.0.1 GNU Gnutls 3.0.2 GNU Gnutls 3.0.3 GNU Gnutls 3.0.4 GNU Gnutls 3.0.5 GNU Gnutls 3.0.6 GNU Gnutls 3.0.7 GNU Gnutls 3.0.8 GNU Gnutls 3.0.9 GNU Gnutls 3.0.10 GNU Gnutls 3.0.11 GNU Gnutls 3.0.12 GNU Gnutls 3.0.13 GNU Gnutls 3.0.14 GNU Gnutls 3.0.15 GNU Gnutls 3.0.16 GNU Gnutls 3.0.17 GNU Gnutls 3.0.18 GNU Gnutls 3.0.19 GNU Gnutls 3.0.20 GNU Gnutls 3.0.21 GNU Gnutls 3.0.22 GNU Gnutls 3.0.23 GNU Gnutls 3.0.24 GNU Gnutls 3.0.25 GNU Gnutls 3.0.26 GNU Gnutls 3.0.27 GNU Gnutls 3.0.28 GNU Gnutls 3.0.29 GNU Gnutls 3.0.30 GNU Gnutls 3.0.31 GNU Gnutls 3.0.32 GNU Gnutls 3.1.0 GNU Gnutls 3.1.1 GNU Gnutls 3.1.2 GNU Gnutls 3.1.3 GNU Gnutls 3.1.4 GNU Gnutls 3.1.5 GNU Gnutls 3.1.6 GNU Gnutls 3.1.7 GNU Gnutls 3.1.8 GNU Gnutls 3.1.9 GNU Gnutls 3.1.10 GNU Gnutls 3.1.11 GNU Gnutls 3.1.12 GNU Gnutls 3.1.13 GNU Gnutls 3.1.14 GNU Gnutls 3.1.15 GNU Gnutls 3.1.16 GNU Gnutls 3.1.17 GNU Gnutls 3.1.18 GNU Gnutls 3.1.19 GNU Gnutls 3.1.20 GNU Gnutls 3.1.21 GNU Gnutls 3.1.22 GNU Gnutls 3.1.23 GNU Gnutls 3.1.24 GNU Gnutls 3.1.25 GNU Gnutls 3.1.26 GNU Gnutls 3.1.27 GNU Gnutls 3.1.28 GNU Gnutls 3.2.0 GNU Gnutls 3.2.1 GNU Gnutls 3.2.2 GNU Gnutls 3.2.3 GNU Gnutls 3.2.4 GNU Gnutls 3.2.5 GNU Gnutls 3.2.6 GNU Gnutls 3.2.7 GNU Gnutls 3.2.8 GNU Gnutls 3.2.8.1 GNU Gnutls 3.2.9 GNU Gnutls 3.2.10 GNU Gnutls 3.2.11 GNU Gnutls 3.2.12 GNU Gnutls 3.2.12.1 GNU Gnutls 3.2.13 GNU Gnutls 3.2.14 GNU Gnutls 3.2.15 GNU Gnutls 3.2.16 GNU Gnutls 3.2.17 GNU Gnutls 3.2.18 GNU Gnutls 3.2.19 GNU Gnutls 3.2.20 GNU Gnutls 3.2.21 GNU Gnutls 3.3.0 GNU Gnutls 3.3.1 GNU Gnutls 3.3.2 GNU Gnutls 3.3.3 GNU Gnutls 3.3.4 GNU Gnutls 3.3.5 GNU Gnutls 3.3.6 GNU Gnutls 3.3.7 GNU Gnutls 3.3.8 GNU Gnutls 3.3.9 GNU Gnutls 3.3.10 GNU Gnutls 3.3.11 GNU Gnutls 3.3.12 GNU Gnutls 3.3.13 GNU Gnutls 3.3.14 GNU Gnutls 3.3.15 GNU Gnutls 3.3.16 GNU Gnutls 3.3.17 GNU Gnutls 3.3.18 GNU Gnutls 3.3.19 GNU Gnutls 3.3.20 GNU Gnutls 3.3.21 GNU Gnutls 3.3.22 GNU Gnutls 3.3.23 GNU Gnutls 3.3.24 GNU Gnutls 3.3.25 GNU Gnutls 3.3.26 GNU Gnutls 3.3.27 GNU Gnutls 3.3.28 GNU Gnutls 3.3.29 GNU Gnutls 3.3.30 GNU Gnutls 3.4.0 GNU Gnutls 3.4.1 GNU Gnutls 3.4.2 GNU Gnutls 3.4.3 GNU Gnutls 3.4.4 GNU Gnutls 3.4.4.1 GNU Gnutls 3.4.5 GNU Gnutls 3.4.6 GNU Gnutls 3.4.7 GNU Gnutls 3.4.8 GNU Gnutls 3.4.9 GNU Gnutls 3.4.10 GNU Gnutls 3.4.11 GNU Gnutls 3.4.12 GNU Gnutls 3.4.13 GNU Gnutls 3.4.14 GNU Gnutls 3.4.15 GNU Gnutls 3.4.16 GNU Gnutls 3.4.17 GNU Gnutls 3.5.0 GNU Gnutls 3.5.1 GNU Gnutls 3.5.2 GNU Gnutls 3.5.3 GNU Gnutls 3.5.4 GNU Gnutls 3.5.5 GNU Gnutls 3.5.6 GNU Gnutls 3.5.7 GNU Gnutls 3.5.8 GNU Gnutls 3.5.9 GNU Gnutls 3.5.10 GNU Gnutls 3.5.11 GNU Gnutls 3.5.12 GNU Gnutls 3.5.13 GNU Gnutls 3.5.14 GNU Gnutls 3.5.15 GNU Gnutls 3.5.16 GNU Gnutls 3.5.17 GNU Gnutls 3.5.18 GNU Gnutls 3.5.19 GNU Gnutls 3.6.0 GNU Gnutls 3.6.1 GNU Gnutls 3.6.2 GNU Gnutls 3.6.3 GNU Gnutls 3.6.4 GNU Gnutls 3.6.5 GNU Gnutls 3.6.6 GNU Gnutls 3.6.7 GNU Gnutls 3.6.8 GNU Gnutls 3.6.8-11.El8_2 GNU Gnutls 3.6.9 GNU Gnutls 3.6.10 GNU Gnutls 3.6.11 GNU Gnutls 3.6.12 GNU Gnutls 3.6.13 GNU Gnutls 3.6.14 GNU Gnutls 3.6.15 GNU Gnutls 3.6.16 GNU Gnutls 3.7.0 GNU Gnutls 3.7.1 GNU Gnutls 3.7.2 GNU Gnutls 3.7.3 GNU Gnutls 3.7.4 GNU Gnutls 3.7.5 GNU Gnutls 3.7.6	350
OS	Redhat Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	2
OS	Fedoraproject Fedoraproject Fedora 35	1
OS	Debian Debian Debian Linux 10.0 Debian Debian Linux 11.0	2

Common Weakness Enumeration (CWE)

CWE-415 - Double Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References