GDB stack buffer overflow while parsing malicious remote target replies
Connecting GDB to a malicious remote target can get your PC hacked.
Summary
A malicious remote debug target can overflow a stack buffer in GDB while GDB parses its replies, crashing GDB or running code with the privileges of the user running it. The gdb package in Red Hat Enterprise Linux 6 through 10 and Red Hat Hardened Images is affected.
Affected when
- GDB connects to a malicious remote debug target
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen