7.5
Élevée
CVE-2022-2509 A vulnerability found in gnutls
Description
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| gnutls | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- access.redhat.com access.redhat.com
- lists.gnupg.org lists.gnupg.org
- DSA-5203 www.debian.org
- [debian-lts-announce] 20220812 [SECURITY] [DLA 3070-1] gnutls28 security update lists.debian.org
- FEDORA-2022-5470992bfc lists.fedoraproject.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de gnutls
Les 5 CVE de gnutls →
CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
7.4
Élevée
CVE-2021-4209
A NULL pointer dereference flaw was found in GnuTLS
Non notée
CVE-2021-20232
A flaw was found in gnutls
9.8
Critique
CVE-2021-20231
A flaw was found in gnutls
Non notée