DEBIAN-CVE-2026-123151: Debian/gdb vulnerability
A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users who run GDB and connect it to a remote debug target are exposed. The malicious remote target can affect the local GDB client process with the privileges of the user running GDB.
What does an attacker need to exploit it?
An attacker needs to control, or cause GDB to connect to, a malicious remote debug target that sends crafted replies. The flaw is triggered while GDB parses those replies.
Is a local GDB session affected?
The provided information identifies the vulnerable path as connecting to a remote debug target. It does not indicate that a GDB session without a remote target connection is affected.
What can happen if exploitation succeeds?
A malicious target can crash GDB by causing a stack buffer overflow. It may also be able to execute arbitrary code in the GDB client process under the privileges of the user who launched GDB.