CVE-2011-4355: GNU Gdb

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

Affected products

• GNU Gdb: up to and including 7.4.1; version 4.18 only; version 5.0 only; version 5.0.92 only; version 5.0.93 only; version 5.1 only; …

Published 2013-03-05. Last modified 2026-06-16.