CVE-2019-1010180
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
CVE-2019-1010180- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
CVE-2019-1010180- Updated
- 2026-11-02
EUVDEUVD-2019-1925 No score
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
EUVD-2019-1925- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rcgh-h6mp-4g9q
7.8
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
GHSA-rcgh-h6mp-4g9q- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-125
- Updated
- 2026-11-02
OSV
7.8
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
CVE-2019-1010180- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-1010180
7.8
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
DEBIAN-CVE-2019-1010180- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 22 moreShow less
OSVOESA-2022-2002
7.8
crash security update
The core analysis suite is a self-contained tool that can be used to investigate either live systems, kernel core dumps created from dump creation facilities such as kdump, kvmdump, xendump, the netdump and diskdump packages offered by Red Hat, the LKCD kernel patch, the mcore kernel patch created by Mission Critical Linux, as well as other formats created by manufacturer-specific firmware.
Security Fix(es):
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.(CVE-2019-1010180)
- Record
OESA-2022-2002- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1635
6.1
Red Hat Security Advisory: gdb security and bug fix update
- Record
RHSA-2020:1635- CVSS 3.0
- 6.1 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-1010180
7.8
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
- Record
UBUNTU-CVE-2019-1010180- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1764771100 No score
Fix CVE(s): CVE-2019-1010180
- SECURITY UPDATE: Buffer overflow when ELF section size is invalid
- debian/patches/CVE-2019-1010180.patch: Skip processing invalid ELF sections
- CVE-2019-1010180
- Record
CLSA-2025-1764771100- Updated
- 2026-11-02
OSVCLSA-2026-1776693427 No score
Fix CVE(s): CVE-2019-1010180
- SECURITY UPDATE: buffer overflow when ELF section size is invalid
- debian/patches/CVE-2019-1010180.patch: reject ELF sections whose recorded size exceeds the file size
- CVE-2019-1010180
- Record
CLSA-2026-1776693427- Updated
- 2026-11-02
OSVCLSA-2026-1777308938 No score
gdb: Fix of CVE-2019-1010180
- CVE-2019-1010180: add warning for corrupt ELF section size larger than file
- Record
CLSA-2026-1777308938- Updated
- 2026-11-02
OSVCLSA-2026-1777446434 No score
gdb: Fix of CVE-2019-1010180
- CVE-2019-1010180: add warning for corrupt ELF section size larger than file
- Record
CLSA-2026-1777446434- Updated
- 2026-11-02
OSVMGASA-2020-0239 No score
Updated gdb packages fix security vulnerability
Updated gdb packages fix security vulnerability:
Potential buffer overflow when loading ELF sections larger than the file (CVE-2019-1010180).
- Record
MGASA-2020-0239- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2415-1 No score
Security update for binutils
This update for binutils fixes the following issues:
binutils was updated to current 2.32 branch [jsc#ECO-368].
Includes following security fixes:
-
CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
-
CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
-
CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
-
CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
-
CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
-
CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
-
CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
-
CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
-
CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
-
CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
-
CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
-
CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
-
CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
-
CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
-
CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)
-
CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
-
CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)
-
enable xtensa architecture (Tensilica lc6 and related)
-
Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).
-
Fixed some LTO build issues (bsc#1133131 bsc#1133232).
-
riscv: Don't check ABI flags if no code section
-
Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
-
Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).
Update to binutils 2.32:
- The binutils now support for the C-SKY processor series.
- The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
- The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
- The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
- Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
- The BFD linker will now report property change in linker map file when merging GNU properties.
- The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
- Record
openSUSE-SU-2019:2415-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2432-1 No score
Security update for binutils
This update for binutils fixes the following issues:
binutils was updated to current 2.32 branch [jsc#ECO-368].
Includes following security fixes:
-
CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
-
CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
-
CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
-
CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
-
CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
-
CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
-
CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
-
CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
-
CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
-
CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
-
CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
-
CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
-
CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
-
CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
-
CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)
-
CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
-
CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)
-
enable xtensa architecture (Tensilica lc6 and related)
-
Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).
-
Fixed some LTO build issues (bsc#1133131 bsc#1133232).
-
riscv: Don't check ABI flags if no code section
-
Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
-
Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).
Update to binutils 2.32:
- The binutils now support for the C-SKY processor series.
- The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
- The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
- The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
- Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
- The BFD linker will now report property change in linker map file when merging GNU properties.
- The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
- Record
openSUSE-SU-2019:2432-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2493-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Update to gdb 8.3.1: (jsc#ECO-368)
Security issues fixed:
- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)
Upgrade libipt from v2.0 to v2.0.1.
-
Enable librpm for version > librpm.so.3 [bsc#1145692]:
- Allow any librpm.so.x
- Add %build test to check for 'zypper install <rpm-packagename>' message
-
Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.
Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
- DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
- Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
- Terminal styling is now available for the CLI and the TUI.
- Removed support for old demangling styles arm, edg, gnu, hp and lucid.
- Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
- Implemented access to more POWER8 registers. [fate#326120, fate#325178]
- Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2493-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2494-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Update to gdb 8.3.1: (jsc#ECO-368)
Security issues fixed:
- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)
Upgrade libipt from v2.0 to v2.0.1.
-
Enable librpm for version > librpm.so.3 [bsc#1145692]:
- Allow any librpm.so.x
- Add %build test to check for 'zypper install <rpm-packagename>' message
-
Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.
Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
- DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
- Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
- Terminal styling is now available for the CLI and the TUI.
- Removed support for old demangling styles arm, edg, gnu, hp and lucid.
- Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
- Implemented access to more POWER8 registers. [fate#326120, fate#325178]
- Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2019:2494-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10651-1 No score
binutils-2.37-1.3 on GA media
These are all security issues fixed in the binutils-2.37-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10651-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10778-1 No score
gdb-10.1-11.2 on GA media
These are all security issues fixed in the gdb-10.1-11.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10778-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:14207-1 No score
Security update for gdb
This update for gdb fixes the following issues:
- CVE-2019-1010180: Fixed a buffer overflow (bsc#1142772).
- Record
SUSE-SU-2019:14207-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2650-1 No score
Security update for binutils
This update for binutils fixes the following issues:
binutils was updated to current 2.32 branch @7b468db3 [jsc#ECO-368]:
Includes the following security fixes:
-
CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
-
CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
-
CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
-
CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
-
CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
-
CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
-
CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
-
CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
-
CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
-
CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
-
CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
-
CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
-
CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
-
CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
-
CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)
-
CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
-
CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)
-
Enable xtensa architecture (Tensilica lc6 and related)
-
Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).
-
Fixed some LTO problems (bsc#1133131 bsc#1133232).
-
riscv: Don't check ABI flags if no code section
Update to binutils 2.32:
- The binutils now support for the C-SKY processor series.
- The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
- The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
- The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
- Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
- The BFD linker will now report property change in linker map file when merging GNU properties.
- The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a linker bug report.
- The GOLD linker has improved warning messages for relocations that refer to discarded sections.
- Improve relro support on s390 [fate#326356]
- Handle ELF compressed header alignment correctly.
- Record
SUSE-SU-2019:2650-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2779-1 No score
Security update for binutils
This update for binutils fixes the following issues:
binutils was updated to current 2.32 branch [jsc#ECO-368].
Includes following security fixes:
-
CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
-
CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
-
CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
-
CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
-
CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
-
CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
-
CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
-
CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
-
CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
-
CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
-
CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
-
CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
-
CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
-
CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
-
CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)
-
CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
-
CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)
-
enable xtensa architecture (Tensilica lc6 and related)
-
Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).
-
Fixed some LTO build issues (bsc#1133131 bsc#1133232).
-
riscv: Don't check ABI flags if no code section
-
Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
-
Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).
Update to binutils 2.32:
- The binutils now support for the C-SKY processor series.
- The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
- The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
- The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
- Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
- The BFD linker will now report property change in linker map file when merging GNU properties.
- The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
- Record
SUSE-SU-2019:2779-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2780-1 No score
Security update for binutils
This update for binutils fixes the following issues:
binutils was updated to current 2.32 branch [jsc#ECO-368].
Includes following security fixes:
-
CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
-
CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
-
CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
-
CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
-
CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
-
CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
-
CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
-
CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
-
CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
-
CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
-
CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
-
CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
-
CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
-
CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
-
CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)
-
CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
-
CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)
-
enable xtensa architecture (Tensilica lc6 and related)
-
Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).
-
Fixed some LTO build issues (bsc#1133131 bsc#1133232).
-
riscv: Don't check ABI flags if no code section
-
Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
-
Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).
Update to binutils 2.32:
- The binutils now support for the C-SKY processor series.
- The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
- The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
- The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
- Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
- The BFD linker will now report property change in linker map file when merging GNU properties.
- The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
- Record
SUSE-SU-2019:2780-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2902-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Update to gdb 8.3.1: (jsc#ECO-368)
Security issues fixed:
- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)
Upgrade libipt from v2.0 to v2.0.1.
-
Enable librpm for version > librpm.so.3 [bsc#1145692]:
- Allow any librpm.so.x
- Add %build test to check for 'zypper install <rpm-packagename>' message
-
Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.
Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
- DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
- Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
- Terminal styling is now available for the CLI and the TUI.
- Removed support for old demangling styles arm, edg, gnu, hp and lucid.
- Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
- Implemented access to more POWER8 registers. [fate#326120, fate#325178]
- Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
- Record
SUSE-SU-2019:2902-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2913-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Update to gdb 8.3.1: (jsc#ECO-368)
Security issues fixed:
- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)
Upgrade libipt from v2.0 to v2.0.1.
-
Enable librpm for version > librpm.so.3 [bsc#1145692]:
- Allow any librpm.so.x
- Add %build test to check for 'zypper install <rpm-packagename>' message
-
Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.
Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
- DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
- Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
- Terminal styling is now available for the CLI and the TUI.
- Removed support for old demangling styles arm, edg, gnu, hp and lucid.
- Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
- Implemented access to more POWER8 registers. [fate#326120, fate#325178]
- Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
- Record
SUSE-SU-2019:2913-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2914-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Update to gdb 8.3.1: (jsc#ECO-368)
Security issues fixed:
- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)
Upgrade libipt from v2.0 to v2.0.1.
-
Enable librpm for version > librpm.so.3 [bsc#1145692]:
- Allow any librpm.so.x
- Add %build test to check for 'zypper install <rpm-packagename>' message
-
Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.
Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
- DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
- Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
- Terminal styling is now available for the CLI and the TUI.
- Removed support for old demangling styles arm, edg, gnu, hp and lucid.
- Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
-
Implemented access to more POWER8 registers. [fate#326120, fate#325178]
-
Add gdb-s390-handle-arch13.diff to handle most new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
- Record
SUSE-SU-2019:2914-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2916-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Update to gdb 8.3.1: (jsc#ECO-368)
Security issues fixed:
- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)
Upgrade libipt from v2.0 to v2.0.1.
-
Enable librpm for version > librpm.so.3 [bsc#1145692]:
- Allow any librpm.so.x
- Add %build test to check for 'zypper install <rpm-packagename>' message
-
Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.
Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
- DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
- Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
- Terminal styling is now available for the CLI and the TUI.
- Removed support for old demangling styles arm, edg, gnu, hp and lucid.
- Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
- Implemented access to more POWER8 registers. [fate#326120, fate#325178]
- Also handle most new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
- Record
SUSE-SU-2019:2916-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdbTuxCare:Debian:10 |
before 8.2.1-2+tuxcare.els1 | 8.2.1-2+tuxcare.els1 |
gdb-minimalTuxCare:Debian:10 |
before 8.2.1-2+tuxcare.els1 | 8.2.1-2+tuxcare.els1 |
gdb-multiarchTuxCare:Debian:10 |
before 8.2.1-2+tuxcare.els1 | 8.2.1-2+tuxcare.els1 |
gdb-sourceTuxCare:Debian:10 |
before 8.2.1-2+tuxcare.els1 | 8.2.1-2+tuxcare.els1 |
gdbserverTuxCare:Debian:10 |
before 8.2.1-2+tuxcare.els1 | 8.2.1-2+tuxcare.els1 |
gdbTuxCare:Ubuntu:16.04 |
before 7.11.1-0ubuntu1~16.5+tuxcare.els2 | 7.11.1-0ubuntu1~16.5+tuxcare.els2 |
gdb-docTuxCare:Ubuntu:16.04 |
before 7.11.1-0ubuntu1~16.5+tuxcare.els2 | 7.11.1-0ubuntu1~16.5+tuxcare.els2 |
gdb-multiarchTuxCare:Ubuntu:16.04 |
before 7.11.1-0ubuntu1~16.5+tuxcare.els2 | 7.11.1-0ubuntu1~16.5+tuxcare.els2 |
gdb-sourceTuxCare:Ubuntu:16.04 |
before 7.11.1-0ubuntu1~16.5+tuxcare.els2 | 7.11.1-0ubuntu1~16.5+tuxcare.els2 |
gdbserverTuxCare:Ubuntu:16.04 |
before 7.11.1-0ubuntu1~16.5+tuxcare.els2 | 7.11.1-0ubuntu1~16.5+tuxcare.els2 |
Show 99 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gdbTuxCare:OracleLinux:6 |
before 7.2-92.0.4.el6.tuxcare.els1 | 7.2-92.0.4.el6.tuxcare.els1 |
gdb-gdbserverTuxCare:OracleLinux:6 |
before 7.2-92.0.4.el6.tuxcare.els1 | 7.2-92.0.4.el6.tuxcare.els1 |
gdbTuxCare:CentOS:6 |
before 7.2-92.el6.tuxcare.els1 | 7.2-92.el6.tuxcare.els1 |
gdb-gdbserverTuxCare:CentOS:6 |
before 7.2-92.el6.tuxcare.els1 | 7.2-92.el6.tuxcare.els1 |
binutilsDebian:12 |
before 2.32.51.20190707-1 | 2.32.51.20190707-1 |
binutilsDebian:13 |
before 2.32.51.20190707-1 | 2.32.51.20190707-1 |
binutilsDebian:14 |
before 2.32.51.20190707-1 | 2.32.51.20190707-1 |
gdbMageia:7 |
before 8.2-8.1.mga7 | 8.2-8.1.mga7 |
crashopenEuler:20.03-LTS-SP1 |
before 7.2.8-4.oe1 | 7.2.8-4.oe1 |
crashopenEuler:20.03-LTS-SP3 |
before 7.2.8-4.oe1 | 7.2.8-4.oe1 |
crashopenEuler:22.03-LTS |
before 7.3.0-6.oe2203 | 7.3.0-6.oe2203 |
gdbRed Hat:enterprise_linux:8::appstream |
before 0:8.2-11.el8 | 0:8.2-11.el8 |
gdb-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:8.2-11.el8 | 0:8.2-11.el8 |
gdb-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:8.2-11.el8 | 0:8.2-11.el8 |
gdb-docRed Hat:enterprise_linux:8::appstream |
before 0:8.2-11.el8 | 0:8.2-11.el8 |
gdb-gdbserverRed Hat:enterprise_linux:8::appstream |
before 0:8.2-11.el8 | 0:8.2-11.el8 |
gdb-headlessRed Hat:enterprise_linux:8::appstream |
before 0:8.2-11.el8 | 0:8.2-11.el8 |
gdbSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 7.5.1-0.9.6.1 | 7.5.1-0.9.6.1 |
binutilsSUSE:HPE Helion OpenStack 8 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:OpenStack Cloud 7 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:OpenStack Cloud 8 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
cross-ppc-binutilsSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
cross-spu-binutilsSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
cross-ppc-binutilsSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
cross-spu-binutilsSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Enterprise Storage 4 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Enterprise Storage 5 From an advisory covering 17 CVEs |
before 2.32-9.33.1 | 2.32-9.33.1 |
binutilsSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 28 CVEs |
before 2.32-7.5.1 | 2.32-7.5.1 |
binutilsSUSE:Linux Enterprise Module for Development Tools 15 SP1 From an advisory covering 28 CVEs |
before 2.32-7.5.1 | 2.32-7.5.1 |
binutilsSUSE:Linux Enterprise Module for Package Hub 15 SP1 From an advisory covering 28 CVEs |
before 2.32-7.5.1 | 2.32-7.5.1 |
binutilsSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 28 CVEs |
before 2.32-6.8.1 | 2.32-6.8.1 |
binutilsSUSE:Linux Enterprise Module for Development Tools 15 From an advisory covering 28 CVEs |
before 2.32-6.8.1 | 2.32-6.8.1 |
binutilsSUSE:Linux Enterprise Module for Package Hub 15 From an advisory covering 28 CVEs |
before 2.32-6.8.1 | 2.32-6.8.1 |
gdbSUSE:Linux Enterprise Module for Development Tools 15 |
before 8.3.1-3.13.1 | 8.3.1-3.13.1 |
gdbSUSE:Linux Enterprise Module for Development Tools 15 SP1 |
before 8.3.1-8.8.1 | 8.3.1-8.8.1 |
gdbSUSE:OpenStack Cloud 7 |
before 8.3.1-1.12.1 | 8.3.1-1.12.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 8.3.1-1.12.1 | 8.3.1-1.12.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 8.3.1-1.12.1 | 8.3.1-1.12.1 |
gdbSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 8.3.1-1.12.1 | 8.3.1-1.12.1 |
gdbSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 8.3.1-1.12.1 | 8.3.1-1.12.1 |
gdbSUSE:Linux Enterprise Server 12 SP2-BCL |
before 8.3.1-1.12.1 | 8.3.1-1.12.1 |
gdbSUSE:HPE Helion OpenStack 8 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:OpenStack Cloud 8 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:OpenStack Cloud Crowbar 8 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Desktop 12 SP4 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server 12 SP3-BCL |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server 12 SP4 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server 12 SP5 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbSUSE:Enterprise Storage 5 |
before 8.3.1-2.14.1 | 8.3.1-2.14.1 |
gdbUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 7.10-1ubuntu27.10-1ubuntu37.10.1-0ubuntu17.10.90.20160215-0ubuntu27.10.90.20160220-0ubuntu1 Show 4 moreShow less7.11-0ubuntu17.11.1-0ubuntu1~16.047.11.1-0ubuntu1~16.57.11.1-0ubuntu1~16.5+esm1 |
None known |
gdbUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 8.0.1-0ubuntu18.0.1-0ubuntu28.0.1-0ubuntu38.1-0ubuntu18.1-0ubuntu2 Show 5 moreShow less8.1-0ubuntu38.1-0ubuntu3.18.1-0ubuntu3.28.1.1-0ubuntu18.1.1-0ubuntu1+esm1 |
None known |
binutilsopenSUSE:Leap 15.0 From an advisory covering 28 CVEs |
before 2.32-lp150.10.1 | 2.32-lp150.10.1 |
binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-aarch64-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-arm-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-avr-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-epiphany-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-hppa-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-hppa64-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-i386-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-ia64-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-m68k-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-mips-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-ppc-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-ppc64-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-ppc64le-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-riscv64-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-rx-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-s390-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-s390x-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-sparc-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-sparc64-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
cross-spu-binutilsopenSUSE:Leap 15.1 From an advisory covering 28 CVEs |
before 2.32-lp151.3.3.1 | 2.32-lp151.3.3.1 |
gdbopenSUSE:Leap 15.0 |
before 8.3.1-lp150.2.10.1 | 8.3.1-lp150.2.10.1 |
gdbopenSUSE:Leap 15.1 |
before 8.3.1-lp151.4.3.1 | 8.3.1-lp151.4.3.1 |
binutilsopenSUSE:Tumbleweed From an advisory covering 106 CVEs |
before 2.37-1.3 | 2.37-1.3 |
gdbopenSUSE:Tumbleweed |
before 10.1-11.2 | 10.1-11.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-1010180 is a high vulnerability (CVSS 7.8) in Gnu Gdb, published July 24, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. Fixed in gdb 8.2.1-2+tuxcare.els1.
References
sourceware.org/bugzilla/show_bug.cgi?id=23657
securityfocus.com/bid/109367
lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
lists.opensuse.org/opensuse-security-announce/2019-11/msg00029.html
lists.opensuse.org/opensuse-security-announce/2019-11/msg00028.html
Show 169 moreShow less
security.gentoo.org/glsa/202003-31
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2019-1010180
github.com/advisories/GHSA-rcgh-h6mp-4g9q
errata.tuxcare.com/els_os/debian10els/CLSA-2025-1764771100.html
errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1776693427.html
errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777308938.html
errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777446434.html
security-tracker.debian.org/tracker/CVE-2019-1010180
advisories.mageia.org/MGASA-2020-0239.html
bugs.mageia.org/show_bug.cgi?id=25668
lists.opensuse.org/opensuse-updates/2019-11/msg00074.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2002
access.redhat.com/errata/RHSA-2020:1635
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1684303
bugzilla.redhat.com/show_bug.cgi?id=1740615
bugzilla.redhat.com/show_bug.cgi?id=1768593
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1635.json
access.redhat.com/security/cve/CVE-2019-1010180
cve.org/CVERecord?id=CVE-2019-1010180
suse.com/support/update/announcement/2019/suse-su-201914207-1
bugzilla.suse.com/1142772
suse.com/security/cve/CVE-2019-1010180
suse.com/support/update/announcement/2019/suse-su-20192650-1
bugzilla.suse.com/1109412
bugzilla.suse.com/1109413
bugzilla.suse.com/1109414
bugzilla.suse.com/1111996
bugzilla.suse.com/1112534
bugzilla.suse.com/1112535
bugzilla.suse.com/1113247
bugzilla.suse.com/1113252
bugzilla.suse.com/1113255
bugzilla.suse.com/1116827
bugzilla.suse.com/1118830
bugzilla.suse.com/1118831
bugzilla.suse.com/1120640
bugzilla.suse.com/1121034
bugzilla.suse.com/1121035
bugzilla.suse.com/1121056
bugzilla.suse.com/1133131
bugzilla.suse.com/1133232
bugzilla.suse.com/1141913
suse.com/security/cve/CVE-2018-1000876
suse.com/security/cve/CVE-2018-17358
suse.com/security/cve/CVE-2018-17359
suse.com/security/cve/CVE-2018-17360
suse.com/security/cve/CVE-2018-17985
suse.com/security/cve/CVE-2018-18309
suse.com/security/cve/CVE-2018-18483
suse.com/security/cve/CVE-2018-18484
suse.com/security/cve/CVE-2018-18605
suse.com/security/cve/CVE-2018-18606
suse.com/security/cve/CVE-2018-18607
suse.com/security/cve/CVE-2018-19931
suse.com/security/cve/CVE-2018-19932
suse.com/security/cve/CVE-2018-20623
suse.com/security/cve/CVE-2018-20651
suse.com/security/cve/CVE-2018-20671
bugzilla.suse.com/ECO-368
bugzilla.suse.com/SLE-6206
suse.com/support/update/announcement/2019/suse-su-20192779-1
bugzilla.suse.com/1118644
bugzilla.suse.com/1152590
bugzilla.suse.com/1154016
bugzilla.suse.com/1154025
suse.com/security/cve/CVE-2018-6323
suse.com/security/cve/CVE-2018-6543
suse.com/security/cve/CVE-2018-6759
suse.com/security/cve/CVE-2018-6872
suse.com/security/cve/CVE-2018-7208
suse.com/security/cve/CVE-2018-7568
suse.com/security/cve/CVE-2018-7569
suse.com/security/cve/CVE-2018-7570
suse.com/security/cve/CVE-2018-7642
suse.com/security/cve/CVE-2018-7643
suse.com/security/cve/CVE-2018-8945
suse.com/support/update/announcement/2019/suse-su-20192780-1
suse.com/support/update/announcement/2019/suse-su-20192902-1
bugzilla.suse.com/1115034
bugzilla.suse.com/1145692
suse.com/support/update/announcement/2019/suse-su-20192913-1
suse.com/support/update/announcement/2019/suse-su-20192914-1
suse.com/support/update/announcement/2019/suse-su-20192916-1
ubuntu.com/security/CVE-2019-1010180
lists.opensuse.org/archives/list/[email protected]/thread/Z3JUZNUB5MLFYPANGJ7Z7AR432VRY6KN
lists.opensuse.org/archives/list/[email protected]/thread/SWUEZJ7AYL2LKLBXPYPMQQS6C42W3MB6
lists.opensuse.org/archives/list/[email protected]/thread/7K76CAP4FT7JIPMNVW5W6OZNGRS3XMVR
lists.opensuse.org/archives/list/[email protected]/thread/E37URKMMJAKXS5WM65BEKIVDDLOSR6PW
suse.com/security/cve/CVE-2014-9939
suse.com/security/cve/CVE-2017-12448
suse.com/security/cve/CVE-2017-12450
suse.com/security/cve/CVE-2017-12452
suse.com/security/cve/CVE-2017-12453
suse.com/security/cve/CVE-2017-12454
suse.com/security/cve/CVE-2017-12456
suse.com/security/cve/CVE-2017-12799
suse.com/security/cve/CVE-2017-13757
suse.com/security/cve/CVE-2017-14128
suse.com/security/cve/CVE-2017-14129
suse.com/security/cve/CVE-2017-14130
suse.com/security/cve/CVE-2017-14333
suse.com/security/cve/CVE-2017-14529
suse.com/security/cve/CVE-2017-14729
suse.com/security/cve/CVE-2017-14745
suse.com/security/cve/CVE-2017-14974
suse.com/security/cve/CVE-2017-15938
suse.com/security/cve/CVE-2017-15939
suse.com/security/cve/CVE-2017-15996
suse.com/security/cve/CVE-2017-16826
suse.com/security/cve/CVE-2017-16827
suse.com/security/cve/CVE-2017-16828
suse.com/security/cve/CVE-2017-16829
suse.com/security/cve/CVE-2017-16830
suse.com/security/cve/CVE-2017-16831
suse.com/security/cve/CVE-2017-16832
suse.com/security/cve/CVE-2017-6965
suse.com/security/cve/CVE-2017-6966
suse.com/security/cve/CVE-2017-6969
suse.com/security/cve/CVE-2017-7209
suse.com/security/cve/CVE-2017-7210
suse.com/security/cve/CVE-2017-7223
suse.com/security/cve/CVE-2017-7224
suse.com/security/cve/CVE-2017-7225
suse.com/security/cve/CVE-2017-7226
suse.com/security/cve/CVE-2017-7299
suse.com/security/cve/CVE-2017-7300
suse.com/security/cve/CVE-2017-7301
suse.com/security/cve/CVE-2017-7302
suse.com/security/cve/CVE-2017-7303
suse.com/security/cve/CVE-2017-7304
suse.com/security/cve/CVE-2017-8392
suse.com/security/cve/CVE-2017-8393
suse.com/security/cve/CVE-2017-8394
suse.com/security/cve/CVE-2017-8396
suse.com/security/cve/CVE-2017-8421
suse.com/security/cve/CVE-2017-9746
suse.com/security/cve/CVE-2017-9747
suse.com/security/cve/CVE-2017-9748
suse.com/security/cve/CVE-2017-9750
suse.com/security/cve/CVE-2017-9755
suse.com/security/cve/CVE-2017-9756
suse.com/security/cve/CVE-2018-10372
suse.com/security/cve/CVE-2018-10373
suse.com/security/cve/CVE-2018-10534
suse.com/security/cve/CVE-2018-10535
suse.com/security/cve/CVE-2019-12972
suse.com/security/cve/CVE-2019-14250
suse.com/security/cve/CVE-2019-14444
suse.com/security/cve/CVE-2019-17450
suse.com/security/cve/CVE-2019-17451
suse.com/security/cve/CVE-2019-9074
suse.com/security/cve/CVE-2019-9075
suse.com/security/cve/CVE-2019-9077
suse.com/security/cve/CVE-2020-16590
suse.com/security/cve/CVE-2020-16591
suse.com/security/cve/CVE-2020-16592
suse.com/security/cve/CVE-2020-16593
suse.com/security/cve/CVE-2020-16598
suse.com/security/cve/CVE-2020-16599
suse.com/security/cve/CVE-2020-35448
suse.com/security/cve/CVE-2020-35493
suse.com/security/cve/CVE-2020-35496
suse.com/security/cve/CVE-2020-35507
suse.com/security/cve/CVE-2021-20197
suse.com/security/cve/CVE-2021-20284
suse.com/security/cve/CVE-2021-3487
Left out here: the rest of 4 source descriptions. The JSON record has them.