{"id":"CVE-2022-2509","aliases":["ALPINE-CVE-2022-2509","ALSA-2022:6854","ALSA-2022:7105","AZL-10439","BELL-CVE-2022-2509","CLSA-2023-1685536090","CLSA-2023-1685536317","DEBIAN-CVE-2022-2509","DLA-3070-1","DSA-5203-1","EUVD-2022-34767","GHSA-w33j-4mrg-pgc3","JLSEC-2026-523","MGASA-2022-0301","OESA-2022-1822","RHSA-2022:6854","RHSA-2022:7105","RLSA-2022:6854","RLSA-2022:7105","SUSE-SU-2022:2830-1","SUSE-SU-2022:2882-1","SUSE-SU-2022:2919-1","UBUNTU-CVE-2022-2509","USN-5550-1","openSUSE-SU-2022:2882-1","openSUSE-SU-2024:12233-1"],"status":"published","title":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs...","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02269,"percentile":0.83196,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2022-08-01T14:01:10Z","modified":"2026-11-03T08:02:15Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"gnutls","fixed_in":["3.7.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"gnutls","fixed_in":["3.7.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"gnutls","fixed_in":["3.7.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnutls","fixed_in":["3.7.7-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnutls","fixed_in":["3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnutls-c++","fixed_in":["3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnutls-dane","fixed_in":["3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnutls-devel","fixed_in":["3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnutls-utils","fixed_in":["3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls","fixed_in":["3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-c++","fixed_in":["3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-dane","fixed_in":["3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-devel","fixed_in":["3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-utils","fixed_in":["3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gnutls","fixed_in":["3.7.7-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","fixed_in":["3.6.16-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.7.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.7.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.7.7-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"gnutls28","fixed_in":["3.7.1-5+deb11u2"],"sources":["osv"]},{"ecosystem":"Julia","package":"GnuTLS_jll","fixed_in":["3.7.8+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"gnutls","fixed_in":["3.6.15-3.3.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gnutls","fixed_in":["3.6.14-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"gnutls","fixed_in":["3.6.14-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"gnutls","fixed_in":["3.7.2-3.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"gnutls","fixed_in":["0:3.7.6-12.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"nettle","fixed_in":["0:3.8-3.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gnutls","fixed_in":["0:3.6.16-5.el8_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gnutls","fixed_in":["3.7.3-150400.4.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"gnutls","fixed_in":["3.7.3-150400.4.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"gnutls28","fixed_in":["3.5.18-1ubuntu1.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","fixed_in":["3.6.13-2ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"gnutls","fixed_in":["3.6.7-150200.14.19.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gnutls","fixed_in":["3.7.7-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-4+deb10u9"}]}],"versions":["3.6.7-4","3.6.7-4+deb10u1","3.6.7-4+deb10u2","3.6.7-4+deb10u3","3.6.7-4+deb10u4","3.6.7-4+deb10u5","3.6.7-4+deb10u6","3.6.7-4+deb10u7","3.6.7-4+deb10u8"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-5+deb11u2"}]}],"versions":["3.7.1-5","3.7.1-5+deb11u1"]},{"source":"osv","ecosystem":"Julia","package":"GnuTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.7.8+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-3.3.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-3.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-12.el9_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8-3.el9_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.45.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.10.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.7"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.1"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.7"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.1"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.19.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"gnutls"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2022-2509","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","report","web"]},{"url":"https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Release Notes","Vendor Advisory","web","article","report"]},{"url":"https://www.debian.org/security/2022/dsa-5203","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2509","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6FL27JS3VM74YEQU7PGB62USO3KSBYZX"},{"url":"https://github.com/advisories/GHSA-w33j-4mrg-pgc3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-2509","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6854","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2108977","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6854.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7105","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7105.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-2509","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1685536090.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1685536317.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2509.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2509","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0301.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30691","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/5NRKG3OBVPVFJTDYYF6SZH5KZIWFLVPW/","tags":["web"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2022-07-07","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5550-1","tags":["advisory"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-August/011930.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1822","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119770","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6854.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2509","tags":["advisory","report"]},{"url":"https://gnutls.org/security-new.html#GNUTLS-SA-2022-07-07","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7105.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6854","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7105","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222830-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196167","tags":["report"]},{"url":"https://bugzilla.suse.com/1202020","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2509","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222882-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222919-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190698","tags":["report"]},{"url":"https://bugzilla.suse.com/1198979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2509","tags":["report"]},{"url":"https://gnutls.org/security-new.html","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4209","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAQLUGC23B5QJHCL4H7XZA5J2ZZWYDUP/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-2509","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:01:10Z","modified":"2026-10-14T13:07:07.646Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-34767","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:01:10Z","modified":"2026-10-14T13:07:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:15.969628Z"}],"ghsa":[{"id":"GHSA-w33j-4mrg-pgc3","title":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs...","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-02T00:00:26Z","modified":"2026-10-14T15:32:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:13:25.439244Z"}],"nvd":[{"id":"CVE-2022-2509","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:15:09.89Z","modified":"2026-10-14T13:17:21.447Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:07:24.39467Z"}],"osv":[{"id":"ALPINE-CVE-2022-2509","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:15:09.89Z","modified":"2026-11-03T07:18:33.12710216Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-10439","title":"CVE-2022-2509 affecting package gnutls for versions less than 3.7.7-1","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:15:09Z","modified":"2026-04-21T04:20:34.761706Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:00.794214Z"},{"id":"BELL-CVE-2022-2509","title":"CVE-2022-2509 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:51.24801Z","modified":"2026-01-26T09:49:50.876845Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-2509","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:01:10Z","modified":"2026-10-28T02:30:54.259937244Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DEBIAN-CVE-2022-2509","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:15:09.89Z","modified":"2026-11-03T08:02:15.346266926Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"JLSEC-2026-523","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in `gnutls_pkcs7_verify` function.","status":"published","published":"2026-05-26T14:17:50.003Z","modified":"2026-07-25T18:24:33.979122704Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1822","title":"gnutls security update","description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures.The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.(CVE-2022-2509)","status":"published","published":"2022-08-12T11:05:05Z","modified":"2026-08-18T01:17:06.234612872Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:6854","title":"Red Hat Security Advisory: gnutls and nettle security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:28:43Z","modified":"2026-06-26T12:22:18.462671368Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7105","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T08:28:51Z","modified":"2026-06-26T12:22:18.587945591Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:6854","title":"Moderate: gnutls and nettle security, bug fix, and enhancement update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nNettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.\n\nThe following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8).\n\nSecurity Fix(es):\n\n* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589)\n\n* Allow enabling KTLS in Rocky Linux 9.1 (BZ#2108532)\n\n* DES-CBC bag is decryptable under FIPS (BZ#2115314)\n\n* allow signature verification using RSA keys \u003c2k in FIPS mode (BZ#2119770)","status":"published","published":"2022-10-11T07:10:20Z","modified":"2026-02-04T22:00:09.760462Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7105","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-25T07:22:40Z","modified":"2026-02-04T07:40:23.626198Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-2509","description":"A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.","status":"published","published":"2022-08-01T14:15:00Z","modified":"2026-04-22T13:18:57.460229Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:6854","title":"Moderate: gnutls and nettle security, bug fix, and enhancement update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nNettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.\n\nThe following packages have been upgraded to a later upstream version: gnutls (3.7.6), nettle (3.8).\n\nSecurity Fix(es):\n\n* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [IBM 9.1] [P10] POWER10 performance enhancements for cryptography: nettle - incremental work (BZ#2102589)\n* Allow enabling KTLS in AlmaLinux 9.1 (BZ#2108532)\n* DES-CBC bag is decryptable under FIPS (BZ#2115314)\n* allow signature verification using RSA keys \u003c2k in FIPS mode (BZ#2119770)","status":"published","published":"2022-10-11T00:00:00Z","modified":"2026-10-29T11:31:16.021267507Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7105","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-25T00:00:00Z","modified":"2026-10-29T11:00:48.63151774Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2023-1685536090","title":"gnutls: Fix of CVE-2022-2509","description":"- CVE-2022-2509: Fix double free during gnutls_pkcs7_verify","status":"published","published":"2023-05-31T12:28:16Z","modified":"2026-06-01T00:33:19.345680617Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1685536317","title":"gnutls: Fix of CVE-2022-2509","description":"- CVE-2022-2509: Fix double free during gnutls_pkcs7_verify","status":"published","published":"2023-05-31T12:32:03Z","modified":"2026-06-01T00:33:13.288387663Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DLA-3070-1","title":"gnutls28 - security update","status":"published","published":"2022-08-11T00:00:00Z","modified":"2026-03-09T01:19:37.354447Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5203-1","title":"gnutls28 - security update","status":"published","published":"2022-08-08T00:00:00Z","modified":"2026-03-09T02:10:21.340879Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0301","title":"Updated gnutls packages fix security vulnerability","description":"A double free error occurs during verification of pkcs7 signatures in\ngnutls_pkcs7_verify function. (CVE-2022-2509)\n","status":"published","published":"2022-08-25T21:21:07Z","modified":"2026-04-16T04:43:33.124346831Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2022:2882-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).\n","status":"published","published":"2022-08-24T08:34:51Z","modified":"2026-02-04T02:52:27.106391Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12233-1","title":"gnutls-3.7.7-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:55.19445Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2830-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).\n- CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). \n","status":"published","published":"2022-08-17T12:36:56Z","modified":"2026-02-04T02:40:36.67944Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2882-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).\n","status":"published","published":"2022-08-24T08:34:42Z","modified":"2026-02-04T02:49:57.697616Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2919-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).\n\nNon-security fixes:\n\n- FIPS: Check minimum keylength for symmetric key generation [bsc#1190698]\n- FIPS: Only allows ECDSA signature with valid set of hashes (SHA2 and SHA3) [bsc#1190698]\n- FIPS: Provides interface for running library self tests on-demand [bsc#1198979]\n","status":"published","published":"2022-08-26T13:04:30Z","modified":"2026-02-04T04:10:16.26672Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5550-1","title":"gnutls28 vulnerabilities","description":"It was discovered that GnuTLS incorrectly handled certain memory\noperations. A remote attacker could possibly use this issue to cause GnuTLS\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-4209)\n\nIt was discovered that GnuTLS incorrectly handled the verification of\ncertain pkcs7 signatures. A remote attacker could use this issue to cause\nGnuTLS to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2022-2509)\n","status":"published","published":"2022-08-04T16:07:06Z","modified":"2026-04-27T19:32:12.142521271Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}