CVE-2019-1010180: Buffer Overflow
First published: Wed Jul 24 2019(Updated: )
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
Credit: josh@bress.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU gdb | <9.1 | |
| openSUSE Leap | =15.0 | |
| openSUSE Leap | =15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00028.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00029.html
- http://www.securityfocus.com/bid/109367
- https://security.gentoo.org/glsa/202003-31
- https://sourceware.org/bugzilla/show_bug.cgi?id=23657
Frequently Asked Questions
What is CVE-2019-1010180?
CVE-2019-1010180 is a vulnerability in GNU gdb that allows for buffer overflow and out-of-bounds memory access.
What is the impact of CVE-2019-1010180?
The impact of CVE-2019-1010180 includes denial of service, memory disclosure, and potential code execution.
Which component of GNU gdb is affected by CVE-2019-1010180?
The main gdb module of GNU gdb is affected by CVE-2019-1010180.
What is the attack vector for CVE-2019-1010180?
The attack vector for CVE-2019-1010180 is opening an ELF for debugging.
Is there a fixed version available for CVE-2019-1010180?
No, there is currently no fixed version available for CVE-2019-1010180.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/gnu
- canonical/gnu gdb
- vendor/opensuse
- canonical/opensuse leap
- version/opensuse leap/15.0
- version/opensuse leap/15.1