GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gdb | Jul 30, 2024 | Jun 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdb-gdbserverUpgrade gdb | Dec 4, 2019 | Jun 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdbUpgrade gdb-gdbserver | Dec 18, 2019 | Jun 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdbUpgrade gdb-gdbserver | Sep 24, 2019 | Jun 21, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gdb-gdbserverUpgrade gdbUpgrade gdb-headless | Nov 28, 2019 | Jun 21, 2017 |
| Oracle Solaris | — | Upgrade developer/debug/gdb to version 8.3.1-11.4.15.0.1.3.0 on Solaris 11.4 | Nov 20, 2019 | Jun 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 15, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 21, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub