7.5
High
CVE-2022-2509 A vulnerability found in gnutls
Description
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gnutls | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- access.redhat.com access.redhat.com
- lists.gnupg.org lists.gnupg.org
- DSA-5203 www.debian.org
- [debian-lts-announce] 20220812 [SECURITY] [DLA 3070-1] gnutls28 security update lists.debian.org
- FEDORA-2022-5470992bfc lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of gnutls
The 5 CVEs of gnutls →
CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
7.4
High
CVE-2021-4209
A NULL pointer dereference flaw was found in GnuTLS
Not rated
CVE-2021-20232
A flaw was found in gnutls
9.8
Critical
CVE-2021-20231
A flaw was found in gnutls
Not rated