vulnerability
FreeBSD: VID-1cd0c17a-17c0-11ed-91a5-080027f5fec9 (CVE-2022-2509): gnutls -- double free vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Aug 9, 2022 | Nov 4, 2022 | Mar 25, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 9, 2022
Added
Nov 4, 2022
Modified
Mar 25, 2026
Description
The GnuTLS project reports: When gnutls_pkcs7_verify cannot verify signature against given trust list, it starts creating a chain of certificates starting from identified signer up to known root. During the creation of this chain the signer certificate gets freed which results in double free when the same signer certificate is freed at the end of the algorithm.
Solution
freebsd-upgrade-package-gnutls
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.