GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6842-1 advisory.

    It was discovered that gdb incorrectly handled certain memory operations when parsing an ELF file. An     attacker could possibly use this issue to cause a denial of service. This issue is the result of an     incomplete fix for CVE-2020-16599. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-4285)

    It was discovered that gdb incorrectly handled memory leading to a heap based buffer overflow. An attacker     could use this

    issue to cause a denial of service, or possibly execute

    arbitrary code. This issue only affected Ubuntu 22.04 LTS.

    (CVE-2023-1972)

    It was discovered that gdb incorrectly handled memory leading to a stack overflow. An attacker could     possibly use this issue to cause a denial of service. This issue only affected

    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.

    (CVE-2023-39128)

    It was discovered that gdb had a use after free vulnerability under certain circumstances. An attacker     could use this to cause

    a denial of service or possibly execute arbitrary code. This issue

    only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS

    and Ubuntu 22.04 LTS. (CVE-2023-39129)

    It was discovered that gdb incorrectly handled memory leading to a

    heap based buffer overflow. An attacker could use this issue to cause a denial of service, or possibly     execute arbitrary code. This issue

    only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-39130)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

  - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow     issue in demangle_type in rust-demangle.c. (CVE-2021-32256)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode     at /gdb/ada-lang.c. (CVE-2023-39128)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode     at /gdb/ada-lang.c. (CVE-2023-39128)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function     add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function     pe_as16() at /gdb/coff-pe-read.c. (CVE-2023-39130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function     add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function     add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function     pe_as16() at /gdb/coff-pe-read.c. (CVE-2023-39130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function     add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
200771	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : gdb vulnerabilities (USN-6842-1)	Nessus	Ubuntu Local Security Checks	medium
198399	RHEL 9 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
192362	EulerOS Virtualization 2.11.0 : gdb (EulerOS-SA-2024-1441)	Nessus	Huawei Local Security Checks	medium
192350	EulerOS Virtualization 2.11.1 : gdb (EulerOS-SA-2024-1413)	Nessus	Huawei Local Security Checks	medium
192094	EulerOS Virtualization 2.10.1 : gdb (EulerOS-SA-2024-1356)	Nessus	Huawei Local Security Checks	medium
192085	EulerOS Virtualization 2.10.0 : gdb (EulerOS-SA-2024-1377)	Nessus	Huawei Local Security Checks	medium
189689	EulerOS 2.0 SP11 : gdb (EulerOS-SA-2024-1119)	Nessus	Huawei Local Security Checks	medium
189676	EulerOS 2.0 SP11 : gdb (EulerOS-SA-2024-1104)	Nessus	Huawei Local Security Checks	medium
188684	EulerOS 2.0 SP10 : gdb (EulerOS-SA-2024-1056)	Nessus	Huawei Local Security Checks	medium
188614	EulerOS 2.0 SP10 : gdb (EulerOS-SA-2024-1080)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2023-39129

medium

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

medium

medium

medium