CVE-2019-1010180

7.8HIGH

Key Information:

Vendor
Gnu
Status
Gdb
Vendor
CVE Published:
24 July 2019

Summary

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Affected Version(s)

gdb All versions (At least as of date 2018-09-16)

References

https://sourceware.org/bugzilla/show_bug.cgi?id=23657
x_refsource_MISC
http://www.securityfocus.com/bid/109367
vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2019...
vendor-advisoryx_refsource_SUSE

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.