Red Hat Enterprise Linux gdbserver heap overflow allows remote code execution
The gdbserver remote debugging program can be hacked.
Summary
A heap buffer overflow in the QTDPsrc packet handler of gdbserver lets an unauthenticated remote attacker run native code in the gdbserver process. The gdb packages in Red Hat Enterprise Linux 6, 7, 8, 9, 10 and Red Hat Hardened Images are affected.
Affected when
- gdbserver is running
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen