Patch Ticker

GDB client stack buffer overflow in tracepoint upload handler

The GDB debugging tool can get your PC hacked if it connects to a fake server.

Summary

A stack buffer overflow in GDB's tracepoint upload handler lets an attacker-controlled debug stub corrupt stack memory during connection setup. Red Hat Enterprise Linux 6, 7, 8, 9, and 10 and Red Hat Hardened Images are listed as affected.

What to do

We have not confirmed a fixed version yet. Check the source links below.

Products and platforms

  • Linux
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images

CVE IDs

Sources

Times

First published

First seen