Oracle Linux 9 : gnutls / and / nettle (ELSA-2022-6854)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6854 advisory. gnutls 3.7.6-12 - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutlskeygenerate wit...

gnutls: Double free during gnutls_pkcs7_verify

A vulnerability was found in gnutls. This issue is due to a double-free error that occurs during the verification of pkcs7 signatures in the gnutlspkcs7verify function...

EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2022-2461)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in...

Security update for gnutls (important)

openSUSE Security Update: Security update for gnutls Announcement ID: openSUSE-SU-2022:2882-1 Rating: important References: 1202020 Cross-References: CVE-2022-2509 CVSS scores: CVE-2022-2509 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2509 SUSE: 7.5...

SUSE SLED15: gnutls / gnutls-guile / libgnutls-devel / libgnutls-devel-32bit / etc (SUSE-SU-2022:2919-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2919-1 advisory. - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020. Non-security fixes: -...

MGASA-2022-0301 Updated gnutls packages fix security vulnerability

A double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify function. CVE-2022-2509...

Updated gnutls packages fix security vulnerability

A double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify function. CVE-2022-2509...

openSUSE: Security Advisory for gnutls (SUSE-SU-2022:2882-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2022:2882-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020...

SUSE-SU-2022:2882-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020...

Debian dla-3070 : gnutls-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3070 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3070-1 [email protected]...

FreeBSD : gnutls -- double free vulnerability (1cd0c17a-17c0-11ed-91a5-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1cd0c17a-17c0-11ed-91a5-080027f5fec9 advisory. - A vulnerability found in gnutls. This security flaw happens because of a double free error occurs...

Debian DSA-5203-1 : gnutls28 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5203 advisory. Jaak Ristioja discovered a double-free vulnerability in GnuTLS, a library implementing the TLS and SSL protocols, during verification of pkcs7 signatures. A remote attacke...

Ubuntu: Security Advisory (USN-5550-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : GnuTLS vulnerabilities (USN-5550-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5550-1 advisory. It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to...

USN-5550-1 gnutls28 vulnerabilities

It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-4209 It was discovered that GnuTLS...

USN-5550-1: GnuTLS vulnerabilities

It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-4209 It was discovered that GnuTLS...

Denial Of Service (DoS)

gnutls is vulnerable to denial of service. The vulnerability exists due to the double error that occurs during verification of pkcs7 signatures in the gnutlspkcs7verify function, allowing an attacker to crash the application...

CVE-2022-2509

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify function...

AZL-10439 CVE-2022-2509 affecting package gnutls for versions less than 3.7.7-1

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify function...