REDHAT-BUG-2359622: Medium severity GNUTLS GNUTLS vulnerability
A double-free vulnerability exists in GnuTLS (confirmed in version 3.8.9) due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure. This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2359622?
The severity of REDHAT-BUG-2359622 is categorized as critical due to the potential for a double-free attack, which can lead to application crashes or code execution.
How do I fix REDHAT-BUG-2359622?
To fix REDHAT-BUG-2359622, it is recommended to update GnuTLS to the latest version that addresses this vulnerability.
What versions of GnuTLS are affected by REDHAT-BUG-2359622?
REDHAT-BUG-2359622 affects GnuTLS version 3.8.9 and possibly earlier versions.
What is the impact of exploiting REDHAT-BUG-2359622?
Exploiting REDHAT-BUG-2359622 could allow an attacker to execute arbitrary code or crash the application.
Is there a workaround for REDHAT-BUG-2359622?
Currently, the best course of action for REDHAT-BUG-2359622 is to apply the available patches or updates, as no recommended workaround is provided.