CVE-2023-39129

2023-07-2519:15:11

Google

osv.dev

gnu gdb

13.0.50.20220805-git

heap use after free

add_pe_exported_sym

coff-pe-read.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

JSON

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.

CPENameOperatorVersion
gdbeq13.0.91-0.1
gdbeq13.0.90.20230114-0.1
gdbeq12.1-4
gdbeq10.1-2
gdbeq13.1-2
gdbeq13.2-1
gdbeq13.0.91.20230210-0.1
gdbeq13.0.50.20221012-1
gdbeq12.1-2
gdbeq12.1-3

Name	Operator	Version
gdb	eq	13.0.91-0.1
gdb	eq	13.0.90.20230114-0.1
gdb	eq	12.1-4
gdb	eq	10.1-2
gdb	eq	13.1-2
gdb	eq	13.2-1
gdb	eq	13.0.91.20230210-0.1
gdb	eq	13.0.50.20221012-1
gdb	eq	12.1-2
gdb	eq	12.1-3