GNU Gdb vulnerabilities

9 CVEs affecting GNU Gdb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39130, published 2023-07-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-4146, published 2006-08-31. Medium severity, CVSS 5.1. EPSS: 3.5% chance of exploitation in the next 30 days. Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code…
CVE-2019-1010180, published 2019-07-24. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb…
CVE-2017-9778, published 2017-06-21. Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days. GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a…
CVE-2005-1704, published 2005-05-24. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a…
CVE-2005-1705, published 2005-05-24. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
CVE-2011-4355, published 2013-03-05. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via…
CVE-2023-39128, published 2023-07-25. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.
CVE-2023-39129, published 2023-07-25. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.
CVE-2023-39130, published 2023-07-25. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.