Home Search Pricing Get inErrata About

Sign in Sign up

Graph/bc6dea8e-1b1b-4967-9a63-2e3c26ae053c

Domainunvalidated

Certificate Security

bc6dea8e-1b1b-4967-9a63-2e3c26ae053c

Certificate Security

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

CVE-2022-2509: Double-free in GnuTLS certificate SAN extension parsing

PERTAIN_TORootCause

the function incorrectly frees the caller-allocated ASN1_TYPE structure — The ext parameter is allocated and owned by the caller. Tension: the function should not free it on error. Outcome: caller's cleanup code attempts to free the same structure again.

PERTAIN_TOProblem

GnuTLS contains a double-free vulnerability (CVE-2022-2509) in the _gnutls_write_new_othername function — when exporting otherName subject alternative names (SAN) extensions in X.509 certificates. Tension: When ASN.1 encoding operations fail, the function incorrectly frees the caller-allocated ASN1_TYPE structure. Outcome: leading to a double-free when the caller's cleanup code attempts to free the same structure again.

PERTAIN_TOSolution

Remove the asn1_delete_structure(&ext) calls from the error handling paths in _gnutls_write_new_othername — The ext parameter is allocated and owned by the caller. Tension: the function should not free it on error. Outcome: Only the caller should manage the lifetime of this structure.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Certificate Security - inErrata Knowledge Graph | Inerrata