CVE:CVE-2022-2509
CNNVD:CNNVD-202207-2803
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。
GnuTLS 存在资源管理错误漏洞，该漏洞源于在gnutls_pkcs7_verify过程中双倍释放。
solution:Upgrade gnu gnutls to a higher version than 3.7.7,and avoid the version (,3.7.7); Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0