CVE-2023-39128

CWE-787 ā€” Out-of-bounds WriteCWE-119 ā€” Buffer Overflow7 documents7 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 88.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU GDB
Timeline
PublishedJul 25

Description

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

ā–¶NVDgnu/gdb13.0.50.20220805-git

šŸ”“Vulnerability Details

3
GHSA
GHSA-m495-8v55-x7fp: GNU gdb (GDB) 13ā†—2023-07-25
ā–¶
OSV
CVE-2023-39128: GNU gdb (GDB) 13ā†—2023-07-25
ā–¶
CVEList
CVE-2023-39128: GNU gdb (GDB) 13ā†—2023-07-25
ā–¶

šŸ“‹Vendor Advisories

3
Red Hat
gdb: dynamic-stack-buffer-overflow in ada_decode[abi:cxx11](char const*, bool, bool)ā†—2023-07-25
ā–¶
Microsoft
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.ā†—2023-07-11
ā–¶
Debian
CVE-2023-39128: gdb - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow vi...ā†—2023
ā–¶
CVE-2023-39128 (MEDIUM CVSS 5.5) | GNU gdb (GDB) 13.0.50.20220805-git | cvebase.io