GDB stack buffer overflow in remote protocol handler allows code execution (Red Hat Enterprise Linux)
If your debugger connects to an attacker's debug target, your PC can be hacked.
Summary
A stack buffer overflow in the GDB client's remote protocol handler lets an attacker-controlled debug target run arbitrary code in the GDB process. The gdb package in Red Hat Enterprise Linux 6, 7, 8, 9, 10 and Red Hat Hardened Images is affected.
Affected when
- GDB connecting remotely to an attacker-controlled debug target
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Times
First published
First seen