CVE-2006-4146
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in...
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
- Record
CVE-2006-4146- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
- Record
CVE-2006-4146- Updated
- 2026-11-02
EUVDEUVD-2006-4136 No score
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
- Record
EUVD-2006-4136- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-63cf-4m5h-x542 No score
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in...
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
- Record
GHSA-63cf-4m5h-x542- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
- Record
CVE-2006-4146- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4146 No score
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
- Record
DEBIAN-CVE-2006-4146- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdbDebian:12 |
before 7.3-1 | 7.3-1 |
gdbDebian:13 |
before 7.3-1 | 7.3-1 |
gdbDebian:14 |
before 7.3-1 | 7.3-1 |
gdbRed Hat:enterprise_linux:4::as |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdb-debuginfoRed Hat:enterprise_linux:4::as |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdbRed Hat:enterprise_linux:4::desktop |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdb-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdbRed Hat:enterprise_linux:4::es |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdb-debuginfoRed Hat:enterprise_linux:4::es |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdbRed Hat:enterprise_linux:4::ws |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gdb-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:6.3.0.0-1.143.el4 | 0:6.3.0.0-1.143.el4 |
gdbRed Hat:enterprise_linux:3::as |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdb-debuginfoRed Hat:enterprise_linux:3::as |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdbRed Hat:enterprise_linux:3::desktop |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdb-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdbRed Hat:enterprise_linux:3::es |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdb-debuginfoRed Hat:enterprise_linux:3::es |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdbRed Hat:enterprise_linux:3::ws |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
gdb-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:6.3.0.0-1.138.el3 | 0:6.3.0.0-1.138.el3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4146 is a medium vulnerability (CVSS 5.1) in Gnu Gdb, published August 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.49%, the 89th percentile. Fixed in gdb 7.3-1.
References
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
vupen.com/english/advisories/2006/4283
secunia.com/advisories/25098
security.gentoo.org/glsa/glsa-200711-23.xml
redhat.com/support/errata/RHSA-2007-0469.html
Show 38 moreShow less
lists.apple.com/archives/security-announce/2006/Oct/msg00000.html
osvdb.org/28318
securitytracker.com/id?1017138
support.avaya.com/elmodocs2/security/ASA-2007-253.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10463
docs.info.apple.com/article.html?artnum=304669
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841
securityfocus.com/bid/19802
ubuntu.com/usn/usn-356-1
nvd.nist.gov/vuln/detail/CVE-2006-4146
github.com/advisories/GHSA-63cf-4m5h-x542
security-tracker.debian.org/tracker/CVE-2006-4146
access.redhat.com/errata/RHSA-2007:0229
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0229.json
cve.org/CVERecord?id=CVE-2006-4146