Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-39129
HistoryJul 25, 2023 - 12:00 a.m.

CVE-2023-39129

2023-07-2500:00:00
ubuntu.com
ubuntu.com
4
gnu gdb heap use after free
add_pe_exported_sym
sourceware
bugzilla
suse
launchpad

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.9%

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use
after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.

Bugs

Notes

Author Note
Priority reason: Crash in a command line tool, negligible security impact
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchgdb< 8.1.1-0ubuntu1+esm1UNKNOWN
ubuntu20.04noarchgdb< 9.2-0ubuntu1~20.04.2UNKNOWN
ubuntu22.04noarchgdb< 12.1-0ubuntu1~22.04.2UNKNOWN
ubuntu16.04noarchgdb< 7.11.1-0ubuntu1~16.5+esm1UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.9%