CVE-2022-2509

🗓️ 01 Aug 2022 14:01:10Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 236 Views

CVE-2022-2509: Double free error in GnuTLS pkcs7 verificatio

Reporter	Title	Published	Views	Family All 140
ALT Linux	Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt2	5 Aug 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package gnutls30 version 3.6.16-alt2	11 Aug 202200:00	–	altlinux
FreeBSD	gnutls -- double free vulnerability	7 Jul 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Expat, SQlite, libxml2, Libksba, zlib and GnuTLS	30 Nov 202208:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway	15 Dec 202217:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	30 Dec 202210:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in GnuTLS (CVE-2022-2509)	31 Mar 202316:53	–	ibm

NVD

Vulners

Node

gnu gnutlsRange<3.7.7

Node

redhat enterprise_linuxMatch8.0

redhat enterprise_linuxMatch9.0

Node

fedoraproject fedoraMatch35

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "product": "GnuTLS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "gnutls 3.7.7(Fixed)"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-2509
debian	www.debian.org/security/2022/dsa-5203
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX/
lists	www.lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00002.html

02 Dec 2025 21:15Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00628

SSVC

CWE-415