202 matches found
PT-2022-37394 · Diplib · Diplib
Name of the Vulnerable Software and Affected Versions: diplib version 3.0.0 Description: The issue is related to a Double Free error. Recommendations: For diplib version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2022-2682)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may...
EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2022-2650)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may...
PT-2022-5337 · Oracle +1 · Virtualbox +1
Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.40 Description: The issue is related to a double free memory error when handling smart card input/output messages in the Core component of Oracle VM VirtualBox. This can be exploited by a remote...
PT-2022-17491 · Qualcomm · Qualcomm Snapdragon Mobile
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in BTHOST, caused by a double free error that occurs during music playback and calls over a Bluetooth headset. Recommendations: ...
Oracle Linux 9 : gnutls / and / nettle (ELSA-2022-6854)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6854 advisory. gnutls 3.7.6-12 - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutlskeygenerate wit...
EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2022-2461)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in...
SUSE SLED15: gnutls / gnutls-guile / libgnutls-devel / libgnutls-devel-32bit / etc (SUSE-SU-2022:2919-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2919-1 advisory. - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020. Non-security fixes: -...
Mageia: Security Advisory (MGASA-2022-0301)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0301 Updated gnutls packages fix security vulnerability
A double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify function. CVE-2022-2509...
SUSE SLES15: gnutls / libgnutls-devel / libgnutls30 / libgnutls30-32bit / etc (SUSE-SU-2022:2830-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2830-1 advisory. - CVE-2022-2509: Fixed a double free issue during PKCS7 verification bsc1202020. - CVE-2021-4209: Fixed null pointer dereference in...
Debian DSA-5203-1 : gnutls28 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5203 advisory. Jaak Ristioja discovered a double-free vulnerability in GnuTLS, a library implementing the TLS and SSL protocols, during verification of pkcs7 signatures. A remote attacke...
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : GnuTLS vulnerabilities (USN-5550-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5550-1 advisory. It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to...
CVE-2022-2509
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify function...
CVE-2022-2509
CVE-2022-2509 is a vulnerability in the GnuTLS library (gnutls) caused by a double free during verification of PKCS7 signatures in gnutls_pkcs7_verify. Connected documents show affected packages across several ecosystems (e.g., Debian gnutls28, AlmaLinux gnutls, Cloud Foundry USN). The root cause...
PT-2022-7559
Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A security flaw occurs due to a double free error during verification of pkcs7 signatures in the gnutls pkcs7 verify function. This issue allows a remote attacker to cause a denial of service...
PT-2022-5386
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.10.3 Description An issue was discovered in libxml2 where certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be...
MGASA-2022-0154 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service DOS issue was found in the Linux kernel smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser...