PT-2019-3232 · Gnu+4 · Gnu Gdb+4
Jun
·
Published
2019-07-24
·
Updated
2024-06-15
·
CVE-2019-1010180
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GNU gdb All versions
Description
The issue is related to a buffer overflow due to out-of-bounds memory access in the main gdb module. This can be exploited by opening a specially crafted ELF file for debugging, potentially leading to denial of service, memory disclosure, and possible code execution. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations
For GNU gdb All versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the gdb module to minimize the risk of exploitation, especially when opening ELF files for debugging. Avoid using the gdb module with untrusted or unknown ELF files until the issue is resolved.
Exploit
Buffer Overflow
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Gnu Gdb
Red Hat
Suse