5 matches found
CVE-2006-4146
CVE-2006-4146 describes a buffer overflow in GDB 6.5 affecting the DWARF and DWARF2 debugging code (dwarfread.c and dwarf2read.c). A crafted file with a DW_FORM_block containing a large number of operations can allow user‑assisted or restricted users to execute arbitrary code. The issue arises fr...
CVE-2023-39129
CVE-2023-39129 affects GNU gdb (GDB) 13.0.50.20220805-git, with a heap use-after-free in add_pe_exported_sym() (gdb/coff-pe-read.c). Impact is application crash/denial of service as described; exploitation status isn’t detailed in the provided docs. Remediation: update to a patched gdb version pe...
CVE-2023-39128
CVE-2023-39128 affects GNU gdb (GDB) 13.0.50.20220805-git, with a stack overflow in ada_decode() implemented in gdb/ada-lang.c. Documents indicate this can lead to denial of service or crash when a crafted file is processed. Remediation in the connected advisories is to upgrade to newer gdb versi...
CVE-2023-39130
CVE-2023-39130 affects GNU gdb 13.0.50.20220805-git, with a heap buffer overflow in the function pe_as16() implemented in gdb/coff-pe-read.c. The issue is documented across multiple connected entries and is tied to the gdb component used for COFF/PE reading. A patched version is available (e.g., ...
CVE-2017-9778
CVE-2017-9778 affects GNU Debugger (GDB) 8.0 and earlier. A malformed DWARF/ELF section can cause GDB to repeatedly allocate memory, potentially exhausting process limits and hindering malware analysis. Connected sources confirm the vulnerability in GDB’s handling of DWARF sections in ELF binarie...