9 matches found
CVE-2019-1010180
Technical details about CVE-2019-1010180 (GNU gdb) are not publicly provided in the supplied documents; no explicit affected versions, root cause, or fixes are stated beyond 'fixed version: Not fixed yet.' Monitor for updates.
CVE-2011-4355
The provided documents describe CVE-2011-4355: GDB up to version 7.4.x (before 7.5) defines .debug_gdb_scripts and automatically loads files from the current working directory, enabling a local attacker to execute crafted files (e.g., Python scripts) and gain privileges. The vulnerability impact ...
CVE-2023-39129
CVE-2023-39129 affects GNU gdb (GDB) 13.0.50.20220805-git, with a heap use-after-free in add_pe_exported_sym() (gdb/coff-pe-read.c). Impact is application crash/denial of service as described; exploitation status isn’t detailed in the provided docs. Remediation: update to a patched gdb version pe...
CVE-2023-39128
CVE-2023-39128 affects GNU gdb (GDB) 13.0.50.20220805-git, with a stack overflow in ada_decode() implemented in gdb/ada-lang.c. Documents indicate this can lead to denial of service or crash when a crafted file is processed. Remediation in the connected advisories is to upgrade to newer gdb versi...
CVE-2017-9778
CVE-2017-9778 affects GNU Debugger (GDB) 8.0 and earlier. A malformed DWARF/ELF section can cause GDB to repeatedly allocate memory, potentially exhausting process limits and hindering malware analysis. Connected sources confirm the vulnerability in GDB’s handling of DWARF sections in ELF binarie...
CVE-2023-39130
CVE-2023-39130 affects GNU gdb 13.0.50.20220805-git, with a heap buffer overflow in the function pe_as16() implemented in gdb/coff-pe-read.c. The issue is documented across multiple connected entries and is tied to the gdb component used for COFF/PE reading. A patched version is available (e.g., ...
CVE-2006-4146
CVE-2006-4146 describes a buffer overflow in GDB 6.5 affecting the DWARF and DWARF2 debugging code (dwarfread.c and dwarf2read.c). A crafted file with a DW_FORM_block containing a large number of operations can allow user‑assisted or restricted users to execute arbitrary code. The issue arises fr...
CVE-2005-1704
CVE-2005-1704 is a heap-based overflow in the BFD library used by gdb, binutils, elfutils, caused by an integer overflow when a crafted object file specifies a large number of section headers. Connected advisories indicate Red Hat updates for elfutils/binutils/gdb (RHSA-2005/659, -673, -709) to r...
CVE-2005-1705
CVE-2005-1705 concerns gdb prior to 6.3 that searches the current working directory for a ".gdbinit" file, allowing a local attacker to execute arbitrary commands as the user running gdb. Multiple connected advisories confirm the issue alongside a separate overflow in gdb that is CVE-2005-1704, b...