Findings

CVE-2022-2509

A vulnerability found in gnutls.

Published Aug 1, 2022 · updated Oct 14, 2026 · gnu gnutls

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 1, 2022 · NIST NVD

    Detected

    A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux11.0
  • cpe fedoraproject/fedora35
  • cpe gnu/gnutlsversion unspecified
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgCVE-2022-2509

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2022-2509

    A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

    nvd.nist.gov

References