Lucene search

K
redhatRedHatRHSA-2007:0469
HistoryJun 11, 2007 - 1:45 p.m.

(RHSA-2007:0469) Low: gdb security and bug fix update

2007-06-1113:45:45
access.redhat.com
10

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

69.6%

GDB, the GNU debugger, allows debugging of programs written in C, C++, and
other languages by executing them in a controlled fashion and then printing
their data.

Various buffer overflows and underflows were found in the DWARF expression
computation stack in GDB. If an attacker could trick a user into loading
an executable containing malicious debugging information into GDB, they may
be able to execute arbitrary code with the privileges of the user.
(CVE-2006-4146)

This updated package also addresses the following issues:

  • Support on 64-bit hosts shared libraries debuginfo larger than 2GB.

  • Fix a race occasionally leaving the detached processes stopped.

  • Fix segmentation fault on the source display by ^X 1.

  • Fix a crash on an opaque type dereference.

All users of gdb should upgrade to this updated package, which contains
backported patches to resolve these issues.

OSVersionArchitecturePackageVersionFilename
RedHat3s390gdb< 6.3.0.0-1.138.el3gdb-6.3.0.0-1.138.el3.s390.rpm

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

69.6%