CVE-2023-39130
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In version 13.0.50.20220805-git of GNU gdb (GDB), a heap buffer overflow was discovered in the function pe_as16() in the file /gdb/coff-pe-read.c.
Risk Assessment
Heap buffer overflow can lead to arbitrary code execution, posing a serious security risk to the system.
Recommendation
It is recommended to update GDB to the latest version to mitigate this vulnerability.
Other vulnerabilities in GNU gdb (GDB) 13.0.50.20220805-git
See all- CVE-2023-39129Medium
In version 13.0.50.20220805-git of GNU gdb (GDB), a heap use after free vulnerability was discovered in the add_pe_exported_sym() function in /gdb/coff-pe-read.c.
- CVE-2023-39128Medium
In version 13.0.50.20220805-git, GNU gdb (GDB) was found to contain a stack overflow in the ada_decode function in /gdb/ada-lang.c.
Original NVD description (English source)
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS