According to the version of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion (CVE-2017-9778)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

According to the version of the gdb package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the crash package has been released.

According to the version of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: object file .debug_gdb_scripts section improper input validation (CVE-2011-4355)

  - gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion (CVE-2017-9778)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code     execution (CVE-2019-1010180)

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit     is reached. This can, for example, impede efforts to analyze malware with GDB. (CVE-2017-9778)

  - An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt     symbol version information may result in a denial of service. This issue is the result of an incomplete     fix for CVE-2020-16599. (CVE-2022-4285)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
131345	EulerOS 2.0 SP8 : gdb (EulerOS-SA-2019-2279)	Nessus	Huawei Local Security Checks	11/27/2019	4/9/2024	medium
196539	RHEL 6 : gdb (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	high
198415	RHEL 6 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	medium
131632	EulerOS 2.0 SP2 : gdb (EulerOS-SA-2019-2479)	Nessus	Huawei Local Security Checks	12/4/2019	4/8/2024	medium
132842	EulerOS Virtualization for ARM 64 3.0.5.0 : gdb (EulerOS-SA-2020-1088)	Nessus	Huawei Local Security Checks	1/13/2020	4/1/2024	medium
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	critical
129122	EulerOS 2.0 SP5 : gdb (EulerOS-SA-2019-1965)	Nessus	Huawei Local Security Checks	9/23/2019	4/24/2024	medium
196611	RHEL 7 : gdb (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	medium
196579	RHEL 5 : gdb (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	high
132301	EulerOS 2.0 SP3 : gdb (EulerOS-SA-2019-2584)	Nessus	Huawei Local Security Checks	12/19/2019	4/3/2024	medium
138007	EulerOS Virtualization 3.0.6.0 : gdb (EulerOS-SA-2020-1788)	Nessus	Huawei Local Security Checks	7/1/2020	3/5/2024	medium
198430	RHEL 5 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	medium
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical
198442	RHEL 7 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	high

Detections

Analytics

Plugins Search

medium

high

medium

medium

medium

critical

medium

medium

high

medium

medium

medium

critical

high