Denial Of Service (DoS)

🗓️ 03 Aug 2022 10:34:13Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 14 Views

Gnutls vulnerability causes denial of servic

Reporter	Title	Published	Views	Family All 141
ALT Linux	Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt2	5 Aug 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package gnutls30 version 3.6.16-alt2	11 Aug 202200:00	–	altlinux
FreeBSD	gnutls -- double free vulnerability	7 Jul 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Expat, SQlite, libxml2, Libksba, zlib and GnuTLS	30 Nov 202208:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway	15 Dec 202217:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	30 Dec 202210:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in GnuTLS (CVE-2022-2509)	31 Mar 202316:53	–	ibm

Vulners

Node

gnu gnutlsMatch3.7.5-r0os

AND

gnu gnutlsMatch3.7.6-r0os

AND

gnu gnutlsMatch3.7.4-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

gnu gnutlsMatch3.7.0-r0os

AND

gnu gnutlsMatch3.7.1-r0os

AND

alpinelinux alpine_linuxMatch3.13

OR

gnu gnutlsMatch3.7.0-r0os

AND

gnu gnutlsMatch3.6.13-r0os

AND

gnu gnutlsMatch3.7.5-r0os

AND

gnu gnutlsMatch3.7.4-r0os

AND

gnu gnutlsMatch3.7.1-r0os

AND

gnu gnutlsMatch3.7.3-r0os

AND

gnu gnutlsMatch3.6.12-r0os

AND

gnu gnutlsMatch3.7.6-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

gnu gnutlsMatch3.7.1-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

gnu gnutlsMatch3.7.1-r0os

AND

alpinelinux alpine_linuxMatch3.14

OR

gnu gnutlsMatch3.6.16_4.el8

OR

gnu gnutlsMatch3.6.5_2.el8

OR

gnu gnutlsMatch3.6.14_7.el8_3

OR

gnu gnutlsMatch3.3.8_12.ael7b_1.1

OR

gnu gnutlsMatch3.6.8_10.el8_2

OR

gnu gnutlsMatch3.6.8_11.el8_2

OR

gnu gnutlsMatch3.3.29_9.el7_6

OR

gnu gnutlsMatch3.6.14_3.el8

OR

gnu gnutlsMatch3.3.29_8.el7

OR

gnu gnutlsMatch3.3.26_9.el7

OR

gnu gnutlsMatch3.6.8_9.el8

OR

gnu gnutlsMatch3.6.14_8.el8_3

OR

gnu gnutlsMatch3.6.8_8.el8

OR

gnu gnutlsMatch3.6.14_6.el8

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00002.html
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
debian	www.debian.org/security/2022/dsa-5203
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX/
access	www.access.redhat.com/security/cve/CVE-2022-2509

07 Nov 2023 22:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.00628

gnutls vulnerability denial of service pkcs7 signatures