7.5
High
CVE-2022-2509 A vulnerability found in gnutls
Description
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gnutls | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Other CVEs of gnutls
The 5 CVEs of gnutls →
CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
7.4
High
CVE-2021-4209
A NULL pointer dereference flaw was found in GnuTLS
Not rated
CVE-2021-20232
A flaw was found in gnutls
9.8
Critical
CVE-2021-20231
A flaw was found in gnutls
Not rated