CVE-2011-4355: Medium severity gnu debugger vulnerability
GNU Project Debugger (GDB) before 7.5, when .debuggdbscripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4355?
CVE-2011-4355 is classified as a high-severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2011-4355?
To mitigate CVE-2011-4355, you should upgrade to GDB version 7.5 or later where the vulnerability is addressed.
Which versions of GDB are affected by CVE-2011-4355?
CVE-2011-4355 affects GDB versions prior to 7.5, including 5.0 to 6.4 and 6.6 to 7.4.
What type of attack does CVE-2011-4355 enable?
CVE-2011-4355 allows local attackers to execute arbitrary Python scripts and potentially escalate privileges.
Is there a workaround for CVE-2011-4355?
A possible workaround for CVE-2011-4355 is to avoid using the .debug_gdb_scripts feature until an upgrade can be performed.