vulnerability
FreeBSD: VID-1cd0c17a-17c0-11ed-91a5-080027f5fec9 (CVE-2022-2509): gnutls -- double free vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Aug 9, 2022 | Nov 4, 2022 | Dec 10, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 9, 2022
Added
Nov 4, 2022
Modified
Dec 10, 2025
Description
The GnuTLS project reports: When gnutls_pkcs7_verify cannot verify signature against given trust list, it starts creating a chain of certificates starting from identified signer up to known root. During the creation of this chain the signer certificate gets freed which results in double free when the same signer certificate is freed at the end of the algorithm.
Solution
freebsd-upgrade-package-gnutls
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.