Heap Use After Free in GNU GDB Software by GNU
CVE-2023-39129

5.5MEDIUM

Key Information:

Vendor
Gnu
Status
Gdb
Vendor
CVE Published:
25 July 2023

Summary

A heap use after free vulnerability exists in GNU GDB, specifically in the add_pe_exported_sym() function located in the coff-pe-read.c file. This flaw may allow an attacker to exploit memory management issues, potentially leading to unpredictable behavior or the execution of arbitrary code. Proper sanitization and management of memory resources are essential to mitigate associated risks.

References

https://sourceware.org/bugzilla/show_bug.cgi?id=30640

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.