Every CVE Search/ Get API key

CVE-2023-39130

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the...

5.5 MediumFix available

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.24%Up 0.2 points since Jul 26, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
CVE-2023-39130
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
CVE-2023-39130
Updated
2026-11-02
EUVDEUVD-2023-42876 No score

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
EUVD-2023-42876
Updated
2026-11-03
GitHub AdvisoriesGHSA-j6cq-8hw2-r793 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the...

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
GHSA-j6cq-8hw2-r793
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVAZL-27629 5.5

CVE-2023-39130 affecting package crash for versions less than 8.0.1-3

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
AZL-27629
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-27670 5.5

CVE-2023-39130 affecting package gdb for versions less than 11.2-3

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
AZL-27670
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 14 moreShow less
OSVAZL-34640 5.5

CVE-2023-39130 affecting package crash for versions less than 8.0.4-3

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
AZL-34640
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34725 5.5

CVE-2023-39130 affecting package gdb for versions less than 13.2-3

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
AZL-34725
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSV 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
CVE-2023-39130
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-39130 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
DEBIAN-CVE-2023-39130
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1868 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.(CVE-2023-39130)

Record
OESA-2023-1868
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1869 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.(CVE-2023-39129)

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.(CVE-2023-39130)

Record
OESA-2023-1869
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1870 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.(CVE-2023-39130)

Record
OESA-2023-1870
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1871 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.(CVE-2023-39130)

Record
OESA-2023-1871
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1872 5.5

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.(CVE-2023-39130)

Record
OESA-2023-1872
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-39130 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Record
UBUNTU-CVE-2023-39130
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2024-1721929836 No score

Fix CVE(s): CVE-2023-39128, CVE-2023-39129, CVE-2023-39130

  • SECURITY UPDATE: stack buffer overflow in ada_decode
    • debian/patches/CVE-2023-39128.patch: Fix stack buffer overflow
    • CVE-2023-39128
  • SECURITY UPDATE: stack buffer overflow
    • debian/patches/CVE-2023-39129.patch: Verify COFF symbol stringtab offset and fix problem with 32bit architecture build
    • CVE-2023-39129
  • SECURITY UPDATE: heap buffer overflow
    • debian/patches/CVE-2023-39130.patch: bfd IO functions give warnings
    • CVE-2023-39130
Record
CLSA-2024-1721929836
Updated
2026-11-02
OSVCLSA-2024-1721929982 No score

Fix CVE(s): CVE-2023-39128, CVE-2023-39129, CVE-2023-39130

  • SECURITY UPDATE: stack buffer overflow in ada_decode
    • debian/patches/CVE-2023-39128.patch: Fix stack buffer overflow
    • CVE-2023-39128
  • SECURITY UPDATE: stack buffer overflow
    • debian/patches/CVE-2023-39129.patch: Verify COFF symbol stringtab offset and fix problem with 32bit architecture build
    • CVE-2023-39129
  • SECURITY UPDATE: heap buffer overflow
    • debian/patches/CVE-2023-39130.patch: bfd IO functions give warnings
    • CVE-2023-39130
Record
CLSA-2024-1721929982
Updated
2026-11-02
OSVMGASA-2024-0246 No score

Updated gdb packages fix security vulnerabilities

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599. (CVE-2022-4285) A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability. (CVE-2023-1972) GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c. (CVE-2023-39128) GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129) GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. (CVE-2023-39130)

Record
MGASA-2024-0246
Updated
2026-11-02
OSVUSN-6842-1 No score

gdb vulnerabilities

It was discovered that gdb incorrectly handled certain memory operations when parsing an ELF file. An attacker could possibly use this issue to cause a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-4285)

It was discovered that gdb incorrectly handled memory leading to a heap based buffer overflow. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-1972)

It was discovered that gdb incorrectly handled memory leading to a stack overflow. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-39128)

It was discovered that gdb had a use after free vulnerability under certain circumstances. An attacker could use this to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-39129)

It was discovered that gdb incorrectly handled memory leading to a heap based buffer overflow. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-39130)

Record
USN-6842-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
crash
Azure Linux:2
 before 8.0.1-3
8.0.1-3
gdb
Azure Linux:2
 before 11.2-3
11.2-3
crash
Azure Linux:3
 before 8.0.4-3
8.0.4-3
gdb
Azure Linux:3
 before 13.2-3
13.2-3
gdb
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 7.11.1-0ubuntu1~16.5+tuxcare.els1
7.11.1-0ubuntu1~16.5+tuxcare.els1
gdb-doc
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 7.11.1-0ubuntu1~16.5+tuxcare.els1
7.11.1-0ubuntu1~16.5+tuxcare.els1
gdb-multiarch
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 7.11.1-0ubuntu1~16.5+tuxcare.els1
7.11.1-0ubuntu1~16.5+tuxcare.els1
gdb-source
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 7.11.1-0ubuntu1~16.5+tuxcare.els1
7.11.1-0ubuntu1~16.5+tuxcare.els1
gdbserver
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 7.11.1-0ubuntu1~16.5+tuxcare.els1
7.11.1-0ubuntu1~16.5+tuxcare.els1
gdb
TuxCare:Ubuntu:18.04
From an advisory covering 3 CVEs
 before 8.1.1-0ubuntu1+tuxcare.els1
8.1.1-0ubuntu1+tuxcare.els1
Show 21 moreShow less
Affected packages
PackageAffectedFixed
gdb-doc
TuxCare:Ubuntu:18.04
From an advisory covering 3 CVEs
 before 8.1.1-0ubuntu1+tuxcare.els1
8.1.1-0ubuntu1+tuxcare.els1
gdb-multiarch
TuxCare:Ubuntu:18.04
From an advisory covering 3 CVEs
 before 8.1.1-0ubuntu1+tuxcare.els1
8.1.1-0ubuntu1+tuxcare.els1
gdb-source
TuxCare:Ubuntu:18.04
From an advisory covering 3 CVEs
 before 8.1.1-0ubuntu1+tuxcare.els1
8.1.1-0ubuntu1+tuxcare.els1
gdbserver
TuxCare:Ubuntu:18.04
From an advisory covering 3 CVEs
 before 8.1.1-0ubuntu1+tuxcare.els1
8.1.1-0ubuntu1+tuxcare.els1
gdb
Debian:12
 All versions, plus listed versions
13.1-313.2-113.2-1+hurd.315.1-115.2-1
Show 36 moreShow less
15.2-2~exp116.0.90.20250111-1~exp116.0.90.20250111-1~exp216.1-116.1-216.1-2+hurd.116.2-116.2-216.2-316.2-416.2-516.2-616.2-716.2-816.3-116.3-216.3-316.3-416.3-4~bpo13+116.3-4~bpo13+216.3-516.3-5~bpo13+117.0.50.20250905-1~exp117.0.90-1~exp117.0.90-1~exp217.1-117.1-1~bpo13+117.1-217.1-317.1-417.2-117.2-1~bpo13+118.1-118.1-218.1-318.1-3~bpo13+1
 None known
gdb
Debian:13
 All versions, plus listed versions
16.3-116.3-216.3-316.3-416.3-4~bpo13+1
Show 17 moreShow less
16.3-4~bpo13+216.3-516.3-5~bpo13+117.0.50.20250905-1~exp117.0.90-1~exp117.0.90-1~exp217.1-117.1-1~bpo13+117.1-217.1-317.1-417.2-117.2-1~bpo13+118.1-118.1-218.1-318.1-3~bpo13+1
 None known
gdb
Debian:14
 All versions, plus listed versions
16.3-116.3-216.3-316.3-416.3-4~bpo13+1
Show 17 moreShow less
16.3-4~bpo13+216.3-516.3-5~bpo13+117.0.50.20250905-1~exp117.0.90-1~exp117.0.90-1~exp217.1-117.1-1~bpo13+117.1-217.1-317.1-417.2-117.2-1~bpo13+118.1-118.1-218.1-318.1-3~bpo13+1
 None known
gdb
Mageia:9
From an advisory covering 5 CVEs
 before 12.1-7.1.mga9
12.1-7.1.mga9
gdb
openEuler:20.03-LTS-SP1
 before 9.2-7.oe1
9.2-7.oe1
gdb
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 9.2-7.oe1
9.2-7.oe1
gdb
openEuler:22.03-LTS
 before 11.1-7.oe2203
11.1-7.oe2203
gdb
openEuler:22.03-LTS-SP1
 before 11.1-8.oe2203sp1
11.1-8.oe2203sp1
gdb
openEuler:22.03-LTS-SP2
 before 11.1-8.oe2203sp2
11.1-8.oe2203sp2
gdb
Ubuntu:Pro:16.04:LTS
 before 7.11.1-0ubuntu1~16.5+esm1, plus listed versions
7.10-1ubuntu27.10-1ubuntu37.10.1-0ubuntu17.10.90.20160215-0ubuntu27.10.90.20160220-0ubuntu17.11-0ubuntu17.11.1-0ubuntu1~16.047.11.1-0ubuntu1~16.5
7.11.1-0ubuntu1~16.5+esm1
gdb
Ubuntu:Pro:18.04:LTS
 before 8.1.1-0ubuntu1+esm1, plus listed versions
8.0.1-0ubuntu18.0.1-0ubuntu28.0.1-0ubuntu38.1-0ubuntu18.1-0ubuntu2
Show 4 moreShow less
8.1-0ubuntu38.1-0ubuntu3.18.1-0ubuntu3.28.1.1-0ubuntu1
8.1.1-0ubuntu1+esm1
gdb
Ubuntu:20.04:LTS
 before 9.2-0ubuntu1~20.04.2, plus listed versions
8.3-0ubuntu19.0.50.20191019-0ubuntu19.0.50.20191119-0ubuntu19.0.90.20191216-0ubuntu19.0.90.20200105-0ubuntu1
Show 4 moreShow less
9.0.90.20200117-0ubuntu19.1-0ubuntu19.2-0ubuntu1~20.049.2-0ubuntu1~20.04.1
9.2-0ubuntu1~20.04.2
gdb
Ubuntu:22.04:LTS
 before 12.1-0ubuntu1~22.04.2, plus listed versions
11.1-0ubuntu211.1-0ubuntu311.2-0ubuntu112.0.50.20220217-0ubuntu112.0.90-0ubuntu112.1-0ubuntu1~22.04
12.1-0ubuntu1~22.04.2
gdb
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 7.11.1-0ubuntu1~16.5+esm1, plus listed versions
7.10-1ubuntu27.10-1ubuntu37.10.1-0ubuntu17.10.90.20160215-0ubuntu27.10.90.20160220-0ubuntu17.11-0ubuntu17.11.1-0ubuntu1~16.047.11.1-0ubuntu1~16.5
7.11.1-0ubuntu1~16.5+esm1
gdb
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 8.1.1-0ubuntu1+esm1, plus listed versions
8.0.1-0ubuntu18.0.1-0ubuntu28.0.1-0ubuntu38.1-0ubuntu18.1-0ubuntu2
Show 4 moreShow less
8.1-0ubuntu38.1-0ubuntu3.18.1-0ubuntu3.28.1.1-0ubuntu1
8.1.1-0ubuntu1+esm1
gdb
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 9.2-0ubuntu1~20.04.2, plus listed versions
8.3-0ubuntu19.0.50.20191019-0ubuntu19.0.50.20191119-0ubuntu19.0.90.20191216-0ubuntu19.0.90.20200105-0ubuntu1
Show 4 moreShow less
9.0.90.20200117-0ubuntu19.1-0ubuntu19.2-0ubuntu1~20.049.2-0ubuntu1~20.04.1
9.2-0ubuntu1~20.04.2
gdb
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 12.1-0ubuntu1~22.04.2, plus listed versions
11.1-0ubuntu211.1-0ubuntu311.2-0ubuntu112.0.50.20220217-0ubuntu112.0.90-0ubuntu112.1-0ubuntu1~22.04
12.1-0ubuntu1~22.04.2

History

History
RecordedChangedSources
affected
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-39130 is a medium vulnerability (CVSS 5.5) in Gnu Gdb, published July 25, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in crash 8.0.1-3.

References

Show 15 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open