Every CVE Search/ Get API key

CVE-2019-1010180

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...

7.8 HighFix available

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.63%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
CVE-2019-1010180
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
CVE-2019-1010180
Updated
2026-11-02
EUVDEUVD-2019-1925 No score

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
EUVD-2019-1925
Updated
2026-11-02
GitHub AdvisoriesGHSA-rcgh-h6mp-4g9q 7.8

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
GHSA-rcgh-h6mp-4g9q
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-119, CWE-125
Updated
2026-11-02
OSV 7.8

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
CVE-2019-1010180
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-1010180 7.8

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
DEBIAN-CVE-2019-1010180
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVOESA-2022-2002 7.8

crash security update

The core analysis suite is a self-contained tool that can be used to investigate either live systems, kernel core dumps created from dump creation facilities such as kdump, kvmdump, xendump, the netdump and diskdump packages offered by Red Hat, the LKCD kernel patch, the mcore kernel patch created by Mission Critical Linux, as well as other formats created by manufacturer-specific firmware.

Security Fix(es):

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.(CVE-2019-1010180)

Record
OESA-2022-2002
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1635 6.1

Red Hat Security Advisory: gdb security and bug fix update

Record
RHSA-2020:1635
CVSS 3.0
6.1 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2019-1010180 7.8

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

Record
UBUNTU-CVE-2019-1010180
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2025-1764771100 No score

Fix CVE(s): CVE-2019-1010180

  • SECURITY UPDATE: Buffer overflow when ELF section size is invalid
    • debian/patches/CVE-2019-1010180.patch: Skip processing invalid ELF sections
    • CVE-2019-1010180
Record
CLSA-2025-1764771100
Updated
2026-11-02
OSVCLSA-2026-1776693427 No score

Fix CVE(s): CVE-2019-1010180

  • SECURITY UPDATE: buffer overflow when ELF section size is invalid
    • debian/patches/CVE-2019-1010180.patch: reject ELF sections whose recorded size exceeds the file size
    • CVE-2019-1010180
Record
CLSA-2026-1776693427
Updated
2026-11-02
OSVCLSA-2026-1777308938 No score

gdb: Fix of CVE-2019-1010180

  • CVE-2019-1010180: add warning for corrupt ELF section size larger than file
Record
CLSA-2026-1777308938
Updated
2026-11-02
OSVCLSA-2026-1777446434 No score

gdb: Fix of CVE-2019-1010180

  • CVE-2019-1010180: add warning for corrupt ELF section size larger than file
Record
CLSA-2026-1777446434
Updated
2026-11-02
OSVMGASA-2020-0239 No score

Updated gdb packages fix security vulnerability

Updated gdb packages fix security vulnerability:

Potential buffer overflow when loading ELF sections larger than the file (CVE-2019-1010180).

Record
MGASA-2020-0239
Updated
2026-11-02
OSVopenSUSE-SU-2019:2415-1 No score

Security update for binutils

This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

  • CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)

  • CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)

  • CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)

  • CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)

  • CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)

  • CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)

  • CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)

  • CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)

  • CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)

  • CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)

  • CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)

  • CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)

  • CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)

  • CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)

  • CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)

  • CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)

  • CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

  • enable xtensa architecture (Tensilica lc6 and related)

  • Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).

  • Fixed some LTO build issues (bsc#1133131 bsc#1133232).

  • riscv: Don't check ABI flags if no code section

  • Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).

  • Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

  • The binutils now support for the C-SKY processor series.
  • The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
  • The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
  • The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
  • Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
  • The BFD linker will now report property change in linker map file when merging GNU properties.
  • The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
Record
openSUSE-SU-2019:2415-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2432-1 No score

Security update for binutils

This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

  • CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)

  • CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)

  • CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)

  • CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)

  • CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)

  • CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)

  • CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)

  • CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)

  • CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)

  • CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)

  • CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)

  • CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)

  • CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)

  • CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)

  • CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)

  • CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)

  • CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

  • enable xtensa architecture (Tensilica lc6 and related)

  • Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).

  • Fixed some LTO build issues (bsc#1133131 bsc#1133232).

  • riscv: Don't check ABI flags if no code section

  • Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).

  • Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

  • The binutils now support for the C-SKY processor series.
  • The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
  • The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
  • The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
  • Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
  • The BFD linker will now report property change in linker map file when merging GNU properties.
  • The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
Record
openSUSE-SU-2019:2432-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2493-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

  • CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  • Enable librpm for version > librpm.so.3 [bsc#1145692]:

    • Allow any librpm.so.x
    • Add %build test to check for 'zypper install <rpm-packagename>' message
  • Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  • DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
  • Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
  • Terminal styling is now available for the CLI and the TUI.
  • Removed support for old demangling styles arm, edg, gnu, hp and lucid.
  • Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
  • Implemented access to more POWER8 registers. [fate#326120, fate#325178]
  • Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2493-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2494-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

  • CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  • Enable librpm for version > librpm.so.3 [bsc#1145692]:

    • Allow any librpm.so.x
    • Add %build test to check for 'zypper install <rpm-packagename>' message
  • Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  • DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
  • Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
  • Terminal styling is now available for the CLI and the TUI.
  • Removed support for old demangling styles arm, edg, gnu, hp and lucid.
  • Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
  • Implemented access to more POWER8 registers. [fate#326120, fate#325178]
  • Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2019:2494-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10651-1 No score

binutils-2.37-1.3 on GA media

These are all security issues fixed in the binutils-2.37-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10651-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10778-1 No score

gdb-10.1-11.2 on GA media

These are all security issues fixed in the gdb-10.1-11.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10778-1
Updated
2026-11-02
OSVSUSE-SU-2019:14207-1 No score

Security update for gdb

This update for gdb fixes the following issues:

  • CVE-2019-1010180: Fixed a buffer overflow (bsc#1142772).
Record
SUSE-SU-2019:14207-1
Updated
2026-11-02
OSVSUSE-SU-2019:2650-1 No score

Security update for binutils

This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch @7b468db3 [jsc#ECO-368]:

Includes the following security fixes:

  • CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)

  • CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)

  • CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)

  • CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)

  • CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)

  • CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)

  • CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)

  • CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)

  • CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)

  • CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)

  • CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)

  • CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)

  • CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)

  • CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)

  • CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)

  • CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)

  • CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

  • Enable xtensa architecture (Tensilica lc6 and related)

  • Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).

  • Fixed some LTO problems (bsc#1133131 bsc#1133232).

  • riscv: Don't check ABI flags if no code section

Update to binutils 2.32:

  • The binutils now support for the C-SKY processor series.
  • The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
  • The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
  • The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
  • Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
  • The BFD linker will now report property change in linker map file when merging GNU properties.
  • The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a linker bug report.
  • The GOLD linker has improved warning messages for relocations that refer to discarded sections.
  • Improve relro support on s390 [fate#326356]
  • Handle ELF compressed header alignment correctly.
Record
SUSE-SU-2019:2650-1
Updated
2026-11-02
OSVSUSE-SU-2019:2779-1 No score

Security update for binutils

This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

  • CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)

  • CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)

  • CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)

  • CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)

  • CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)

  • CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)

  • CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)

  • CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)

  • CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)

  • CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)

  • CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)

  • CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)

  • CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)

  • CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)

  • CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)

  • CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)

  • CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

  • enable xtensa architecture (Tensilica lc6 and related)

  • Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).

  • Fixed some LTO build issues (bsc#1133131 bsc#1133232).

  • riscv: Don't check ABI flags if no code section

  • Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).

  • Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

  • The binutils now support for the C-SKY processor series.
  • The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
  • The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
  • The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
  • Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
  • The BFD linker will now report property change in linker map file when merging GNU properties.
  • The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
Record
SUSE-SU-2019:2779-1
Updated
2026-11-02
OSVSUSE-SU-2019:2780-1 No score

Security update for binutils

This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

  • CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)

  • CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)

  • CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)

  • CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)

  • CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)

  • CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)

  • CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)

  • CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)

  • CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)

  • CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)

  • CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)

  • CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)

  • CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)

  • CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)

  • CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in load_specific_debug_section in objdump.c (bsc#1121056)

  • CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)

  • CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

  • enable xtensa architecture (Tensilica lc6 and related)

  • Use -ffat-lto-objects in order to provide assembly for static libs (bsc#1141913).

  • Fixed some LTO build issues (bsc#1133131 bsc#1133232).

  • riscv: Don't check ABI flags if no code section

  • Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).

  • Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

  • The binutils now support for the C-SKY processor series.
  • The x86 assembler now supports a -mvexwig=[0|1] option to control encoding of VEX.W-ignored (WIG) VEX instructions. It also has a new -mx86-used-note=[yes|no] option to generate (or not) x86 GNU property notes.
  • The MIPS assembler now supports the Loongson EXTensions R2 (EXT2), the Loongson EXTensions (EXT) instructions, the Loongson Content Address Memory (CAM) ASE and the Loongson MultiMedia extensions Instructions (MMI) ASE.
  • The addr2line, c++filt, nm and objdump tools now have a default limit on the maximum amount of recursion that is allowed whilst demangling strings. This limit can be disabled if necessary.
  • Objdump's --disassemble option can now take a parameter, specifying the starting symbol for disassembly. Disassembly will continue from this symbol up to the next symbol or the end of the function.
  • The BFD linker will now report property change in linker map file when merging GNU properties.
  • The BFD linker's -t option now doesn't report members within archives, unless -t is given twice. This makes it more useful when generating a list of files that should be packaged for a …
Record
SUSE-SU-2019:2780-1
Updated
2026-11-02
OSVSUSE-SU-2019:2902-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

  • CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  • Enable librpm for version > librpm.so.3 [bsc#1145692]:

    • Allow any librpm.so.x
    • Add %build test to check for 'zypper install <rpm-packagename>' message
  • Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  • DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
  • Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
  • Terminal styling is now available for the CLI and the TUI.
  • Removed support for old demangling styles arm, edg, gnu, hp and lucid.
  • Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
  • Implemented access to more POWER8 registers. [fate#326120, fate#325178]
  • Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
Record
SUSE-SU-2019:2902-1
Updated
2026-11-02
OSVSUSE-SU-2019:2913-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

  • CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  • Enable librpm for version > librpm.so.3 [bsc#1145692]:

    • Allow any librpm.so.x
    • Add %build test to check for 'zypper install <rpm-packagename>' message
  • Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  • DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
  • Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
  • Terminal styling is now available for the CLI and the TUI.
  • Removed support for old demangling styles arm, edg, gnu, hp and lucid.
  • Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
  • Implemented access to more POWER8 registers. [fate#326120, fate#325178]
  • Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
Record
SUSE-SU-2019:2913-1
Updated
2026-11-02
OSVSUSE-SU-2019:2914-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

  • CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  • Enable librpm for version > librpm.so.3 [bsc#1145692]:

    • Allow any librpm.so.x
    • Add %build test to check for 'zypper install <rpm-packagename>' message
  • Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  • DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
  • Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
  • Terminal styling is now available for the CLI and the TUI.
  • Removed support for old demangling styles arm, edg, gnu, hp and lucid.
  • Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
  • Implemented access to more POWER8 registers. [fate#326120, fate#325178]

  • Add gdb-s390-handle-arch13.diff to handle most new s390 arch13 instructions. [fate#327369, jsc#ECO-368]

Record
SUSE-SU-2019:2914-1
Updated
2026-11-02
OSVSUSE-SU-2019:2916-1 No score

Security update for gdb

This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

  • CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

  • Enable librpm for version > librpm.so.3 [bsc#1145692]:

    • Allow any librpm.so.x
    • Add %build test to check for 'zypper install <rpm-packagename>' message
  • Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

  • DWARF index cache: GDB can now automatically save indices of DWARF symbols on disk to speed up further loading of the same binaries.
  • Ada task switching is now supported on aarch64-elf targets when debugging a program using the Ravenscar Profile.
  • Terminal styling is now available for the CLI and the TUI.
  • Removed support for old demangling styles arm, edg, gnu, hp and lucid.
  • Support for new native configuration RISC-V GNU/Linux (riscv*--linux).
  • Implemented access to more POWER8 registers. [fate#326120, fate#325178]
  • Also handle most new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
Record
SUSE-SU-2019:2916-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gdb
TuxCare:Debian:10
before 8.2.1-2+tuxcare.els1
8.2.1-2+tuxcare.els1
gdb-minimal
TuxCare:Debian:10
before 8.2.1-2+tuxcare.els1
8.2.1-2+tuxcare.els1
gdb-multiarch
TuxCare:Debian:10
before 8.2.1-2+tuxcare.els1
8.2.1-2+tuxcare.els1
gdb-source
TuxCare:Debian:10
before 8.2.1-2+tuxcare.els1
8.2.1-2+tuxcare.els1
gdbserver
TuxCare:Debian:10
before 8.2.1-2+tuxcare.els1
8.2.1-2+tuxcare.els1
gdb
TuxCare:Ubuntu:16.04
before 7.11.1-0ubuntu1~16.5+tuxcare.els2
7.11.1-0ubuntu1~16.5+tuxcare.els2
gdb-doc
TuxCare:Ubuntu:16.04
before 7.11.1-0ubuntu1~16.5+tuxcare.els2
7.11.1-0ubuntu1~16.5+tuxcare.els2
gdb-multiarch
TuxCare:Ubuntu:16.04
before 7.11.1-0ubuntu1~16.5+tuxcare.els2
7.11.1-0ubuntu1~16.5+tuxcare.els2
gdb-source
TuxCare:Ubuntu:16.04
before 7.11.1-0ubuntu1~16.5+tuxcare.els2
7.11.1-0ubuntu1~16.5+tuxcare.els2
gdbserver
TuxCare:Ubuntu:16.04
before 7.11.1-0ubuntu1~16.5+tuxcare.els2
7.11.1-0ubuntu1~16.5+tuxcare.els2
Show 99 moreShow less
Affected packages
PackageAffectedFixed
gdb
TuxCare:OracleLinux:6
before 7.2-92.0.4.el6.tuxcare.els1
7.2-92.0.4.el6.tuxcare.els1
gdb-gdbserver
TuxCare:OracleLinux:6
before 7.2-92.0.4.el6.tuxcare.els1
7.2-92.0.4.el6.tuxcare.els1
gdb
TuxCare:CentOS:6
before 7.2-92.el6.tuxcare.els1
7.2-92.el6.tuxcare.els1
gdb-gdbserver
TuxCare:CentOS:6
before 7.2-92.el6.tuxcare.els1
7.2-92.el6.tuxcare.els1
binutils
Debian:12
before 2.32.51.20190707-1
2.32.51.20190707-1
binutils
Debian:13
before 2.32.51.20190707-1
2.32.51.20190707-1
binutils
Debian:14
before 2.32.51.20190707-1
2.32.51.20190707-1
gdb
Mageia:7
before 8.2-8.1.mga7
8.2-8.1.mga7
crash
openEuler:20.03-LTS-SP1
before 7.2.8-4.oe1
7.2.8-4.oe1
crash
openEuler:20.03-LTS-SP3
before 7.2.8-4.oe1
7.2.8-4.oe1
crash
openEuler:22.03-LTS
before 7.3.0-6.oe2203
7.3.0-6.oe2203
gdb
Red Hat:enterprise_linux:8::appstream
before 0:8.2-11.el8
0:8.2-11.el8
gdb-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:8.2-11.el8
0:8.2-11.el8
gdb-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:8.2-11.el8
0:8.2-11.el8
gdb-doc
Red Hat:enterprise_linux:8::appstream
before 0:8.2-11.el8
0:8.2-11.el8
gdb-gdbserver
Red Hat:enterprise_linux:8::appstream
before 0:8.2-11.el8
0:8.2-11.el8
gdb-headless
Red Hat:enterprise_linux:8::appstream
before 0:8.2-11.el8
0:8.2-11.el8
gdb
SUSE:Linux Enterprise Point of Sale 11 SP3
before 7.5.1-0.9.6.1
7.5.1-0.9.6.1
binutils
SUSE:HPE Helion OpenStack 8
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:OpenStack Cloud 7
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:OpenStack Cloud 8
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
cross-ppc-binutils
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
cross-spu-binutils
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
cross-ppc-binutils
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
cross-spu-binutils
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Enterprise Storage 4
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Enterprise Storage 5
From an advisory covering 17 CVEs
before 2.32-9.33.1
2.32-9.33.1
binutils
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 28 CVEs
before 2.32-7.5.1
2.32-7.5.1
binutils
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 28 CVEs
before 2.32-7.5.1
2.32-7.5.1
binutils
SUSE:Linux Enterprise Module for Package Hub 15 SP1
From an advisory covering 28 CVEs
before 2.32-7.5.1
2.32-7.5.1
binutils
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 28 CVEs
before 2.32-6.8.1
2.32-6.8.1
binutils
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 28 CVEs
before 2.32-6.8.1
2.32-6.8.1
binutils
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 28 CVEs
before 2.32-6.8.1
2.32-6.8.1
gdb
SUSE:Linux Enterprise Module for Development Tools 15
before 8.3.1-3.13.1
8.3.1-3.13.1
gdb
SUSE:Linux Enterprise Module for Development Tools 15 SP1
before 8.3.1-8.8.1
8.3.1-8.8.1
gdb
SUSE:OpenStack Cloud 7
before 8.3.1-1.12.1
8.3.1-1.12.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
before 8.3.1-1.12.1
8.3.1-1.12.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
before 8.3.1-1.12.1
8.3.1-1.12.1
gdb
SUSE:Linux Enterprise Server 12 SP1-LTSS
before 8.3.1-1.12.1
8.3.1-1.12.1
gdb
SUSE:Linux Enterprise Server 12 SP2-LTSS
before 8.3.1-1.12.1
8.3.1-1.12.1
gdb
SUSE:Linux Enterprise Server 12 SP2-BCL
before 8.3.1-1.12.1
8.3.1-1.12.1
gdb
SUSE:HPE Helion OpenStack 8
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:OpenStack Cloud 8
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:OpenStack Cloud Crowbar 8
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Desktop 12 SP4
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Software Development Kit 12 SP4
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Software Development Kit 12 SP5
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server 12 SP3-LTSS
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server 12 SP3-BCL
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server 12 SP4
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server 12 SP5
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
SUSE:Enterprise Storage 5
before 8.3.1-2.14.1
8.3.1-2.14.1
gdb
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
7.10-1ubuntu27.10-1ubuntu37.10.1-0ubuntu17.10.90.20160215-0ubuntu27.10.90.20160220-0ubuntu1
Show 4 moreShow less
7.11-0ubuntu17.11.1-0ubuntu1~16.047.11.1-0ubuntu1~16.57.11.1-0ubuntu1~16.5+esm1
None known
gdb
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
8.0.1-0ubuntu18.0.1-0ubuntu28.0.1-0ubuntu38.1-0ubuntu18.1-0ubuntu2
Show 5 moreShow less
8.1-0ubuntu38.1-0ubuntu3.18.1-0ubuntu3.28.1.1-0ubuntu18.1.1-0ubuntu1+esm1
None known
binutils
openSUSE:Leap 15.0
From an advisory covering 28 CVEs
before 2.32-lp150.10.1
2.32-lp150.10.1
binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-aarch64-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-arm-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-avr-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-epiphany-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-hppa-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-hppa64-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-i386-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-ia64-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-m68k-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-mips-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-ppc-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-ppc64-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-ppc64le-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-riscv64-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-rx-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-s390-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-s390x-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-sparc-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-sparc64-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
cross-spu-binutils
openSUSE:Leap 15.1
From an advisory covering 28 CVEs
before 2.32-lp151.3.3.1
2.32-lp151.3.3.1
gdb
openSUSE:Leap 15.0
before 8.3.1-lp150.2.10.1
8.3.1-lp150.2.10.1
gdb
openSUSE:Leap 15.1
before 8.3.1-lp151.4.3.1
8.3.1-lp151.4.3.1
binutils
openSUSE:Tumbleweed
From an advisory covering 106 CVEs
before 2.37-1.3
2.37-1.3
gdb
openSUSE:Tumbleweed
before 10.1-11.2
10.1-11.2

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-1010180 is a high vulnerability (CVSS 7.8) in Gnu Gdb, published July 24, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. Fixed in gdb 8.2.1-2+tuxcare.els1.

References

Show 169 moreShow less
This page doesn't list everything

Left out here: the rest of 4 source descriptions. The JSON record has them.

MoveEnter Open