CVE-2011-4355
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads...
CVE-2011-4355 is a medium vulnerability (CVSS 6.9) in Gnu Gdb, published March 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in gdb 7.6-1.
- Severity
- 6.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.36%EPSS, 30th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7.6-1gdb +14 more
Description
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdbDebian:12 | before 7.6-1 | 7.6-1 |
gdbDebian:13 | before 7.6-1 | 7.6-1 |
gdbDebian:14 | before 7.6-1 | 7.6-1 |
gdbRed Hat:enterprise_linux:6::client | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-debuginfoRed Hat:enterprise_linux:6::client | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::client | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdbRed Hat:enterprise_linux:6::computenode | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-debuginfoRed Hat:enterprise_linux:6::computenode | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::computenode | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdbRed Hat:enterprise_linux:6::server | before 0:7.2-60.el6 | 0:7.2-60.el6 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gdb-debuginfoRed Hat:enterprise_linux:6::server | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::server | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdbRed Hat:enterprise_linux:6::workstation | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-debuginfoRed Hat:enterprise_linux:6::workstation | before 0:7.2-60.el6 | 0:7.2-60.el6 |
gdb-gdbserverRed Hat:enterprise_linux:6::workstation | before 0:7.2-60.el6 | 0:7.2-60.el6 |
What each source reports
NVD Score used
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
CVE-2011-4355- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
CVE-2011-4355- Updated
- 2026-11-02
EUVDEUVD-2011-4286No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
EUVD-2011-4286- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f7x3-c4pv-3v5rNo score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads...
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
GHSA-f7x3-c4pv-3v5r- Updated
- 2026-11-02
OSVNo score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
CVE-2011-4355- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4355No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
DEBIAN-CVE-2011-4355- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-4355No score
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
- Record
UBUNTU-CVE-2011-4355- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2013-0522.html
sourceware.org/ml/gdb-patches/2011-04/msg00559.html
securitytracker.com/id/1028191
nvd.nist.gov/vuln/detail/CVE-2011-4355
Show 13 moreShow less
access.redhat.com/errata/RHSA-2013:0522
bugzilla.redhat.com/show_bug.cgi?id=703238
github.com/advisories/GHSA-f7x3-c4pv-3v5r
security-tracker.debian.org/tracker/CVE-2011-4355
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0522.json
cve.org/CVERecord?id=CVE-2011-4355
ubuntu.com/security/CVE-2011-4355