CVE-2011-4355
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads...
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
Exploit likelihood
What each source reports
NVD Score used
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
CVE-2011-4355- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
CVE-2011-4355- Updated
- 2026-11-02
EUVDEUVD-2011-4286 No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
EUVD-2011-4286- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f7x3-c4pv-3v5r No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads...
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
GHSA-f7x3-c4pv-3v5r- Updated
- 2026-11-02
OSV No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
CVE-2011-4355- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4355 No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
DEBIAN-CVE-2011-4355- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-4355 No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
UBUNTU-CVE-2011-4355- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdbDebian:12 |
before 7.6-1 | 7.6-1 |
gdbDebian:13 |
before 7.6-1 | 7.6-1 |
gdbDebian:14 |
before 7.6-1 | 7.6-1 |
gdbRed Hat:enterprise_linux:6::client |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-debuginfoRed Hat:enterprise_linux:6::client |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::client |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdbRed Hat:enterprise_linux:6::computenode |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::computenode |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdbRed Hat:enterprise_linux:6::server |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gdb-debuginfoRed Hat:enterprise_linux:6::server |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::server |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdbRed Hat:enterprise_linux:6::workstation |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::workstation |
before 0:7.2-60.el6 | 0:7.2-60.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4355 is a medium vulnerability (CVSS 6.9) in Gnu Gdb, published March 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in gdb 7.6-1.
References
rhn.redhat.com/errata/RHSA-2013-0522.html
sourceware.org/ml/gdb-patches/2011-04/msg00559.html
securitytracker.com/id/1028191
nvd.nist.gov/vuln/detail/CVE-2011-4355
Show 13 moreShow less
access.redhat.com/errata/RHSA-2013:0522
bugzilla.redhat.com/show_bug.cgi?id=703238
github.com/advisories/GHSA-f7x3-c4pv-3v5r
security-tracker.debian.org/tracker/CVE-2011-4355
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0522.json
cve.org/CVERecord?id=CVE-2011-4355
ubuntu.com/security/CVE-2011-4355