GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code     execution (CVE-2019-1010180)

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit     is reached. This can, for example, impede efforts to analyze malware with GDB. (CVE-2017-9778)

  - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt     symbol version information may result in a denial of service. This issue is the result of an incomplete     fix for CVE-2020-16599. (CVE-2022-4285)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: object file .debug_gdb_scripts section improper input validation (CVE-2011-4355)

  - gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion (CVE-2017-9778)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion (CVE-2017-9778)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

According to the version of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gdb package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198442	RHEL 7 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198430	RHEL 5 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198415	RHEL 6 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
138007	EulerOS Virtualization 3.0.6.0 : gdb (EulerOS-SA-2020-1788)	Nessus	Huawei Local Security Checks	medium
132842	EulerOS Virtualization for ARM 64 3.0.5.0 : gdb (EulerOS-SA-2020-1088)	Nessus	Huawei Local Security Checks	medium
132301	EulerOS 2.0 SP3 : gdb (EulerOS-SA-2019-2584)	Nessus	Huawei Local Security Checks	medium
131632	EulerOS 2.0 SP2 : gdb (EulerOS-SA-2019-2479)	Nessus	Huawei Local Security Checks	medium
131345	EulerOS 2.0 SP8 : gdb (EulerOS-SA-2019-2279)	Nessus	Huawei Local Security Checks	medium
129122	EulerOS 2.0 SP5 : gdb (EulerOS-SA-2019-1965)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2017-9778

medium

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

medium

medium