CVE-2005-1704
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils,...
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
- Record
CVE-2005-1704- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
- Record
CVE-2005-1704- Updated
- 2026-11-02
EUVDEUVD-2005-1706 No score
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
- Record
EUVD-2005-1706- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r87q-q7hx-24jg No score
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils,...
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
- Record
GHSA-r87q-q7hx-24jg- Updated
- 2026-11-02
OSV No score
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
- Record
CVE-2005-1704- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1704 No score
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
- Record
DEBIAN-CVE-2005-1704- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdbDebian:12 |
before 6.3-6 | 6.3-6 |
gdbDebian:13 |
before 6.3-6 | 6.3-6 |
gdbDebian:14 |
before 6.3-6 | 6.3-6 |
binutilsRed Hat:enterprise_linux:3::as |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutils-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutilsRed Hat:enterprise_linux:3::desktop |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutils-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutilsRed Hat:enterprise_linux:3::es |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutils-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutilsRed Hat:enterprise_linux:3::ws |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
binutils-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.14.90.0.4-39 | 0:2.14.90.0.4-39 |
binutilsRed Hat:enterprise_linux:4::as |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutils-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutilsRed Hat:enterprise_linux:4::desktop |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutils-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutilsRed Hat:enterprise_linux:4::es |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutils-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutilsRed Hat:enterprise_linux:4::ws |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
binutils-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.15.92.0.2-15 | 0:2.15.92.0.2-15 |
gdbRed Hat:enterprise_linux:4::as |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdb-debuginfoRed Hat:enterprise_linux:4::as |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdbRed Hat:enterprise_linux:4::desktop |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdb-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdbRed Hat:enterprise_linux:4::es |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdb-debuginfoRed Hat:enterprise_linux:4::es |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdbRed Hat:enterprise_linux:4::ws |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
gdb-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:6.3.0.0-1.63 | 0:6.3.0.0-1.63 |
elfutilsRed Hat:enterprise_linux:4::as |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-develRed Hat:enterprise_linux:4::as |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelfRed Hat:enterprise_linux:4::as |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelf-develRed Hat:enterprise_linux:4::as |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutilsRed Hat:enterprise_linux:4::desktop |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-develRed Hat:enterprise_linux:4::desktop |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelfRed Hat:enterprise_linux:4::desktop |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelf-develRed Hat:enterprise_linux:4::desktop |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutilsRed Hat:enterprise_linux:4::es |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-develRed Hat:enterprise_linux:4::es |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelfRed Hat:enterprise_linux:4::es |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelf-develRed Hat:enterprise_linux:4::es |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutilsRed Hat:enterprise_linux:4::ws |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-develRed Hat:enterprise_linux:4::ws |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelfRed Hat:enterprise_linux:4::ws |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutils-libelf-develRed Hat:enterprise_linux:4::ws |
before 0:0.97.1-3 | 0:0.97.1-3 |
elfutilsRed Hat:enterprise_linux:3::as |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-develRed Hat:enterprise_linux:3::as |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelfRed Hat:enterprise_linux:3::as |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelf-develRed Hat:enterprise_linux:3::as |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutilsRed Hat:enterprise_linux:3::desktop |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-develRed Hat:enterprise_linux:3::desktop |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelfRed Hat:enterprise_linux:3::desktop |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelf-develRed Hat:enterprise_linux:3::desktop |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutilsRed Hat:enterprise_linux:3::es |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-develRed Hat:enterprise_linux:3::es |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelfRed Hat:enterprise_linux:3::es |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelf-develRed Hat:enterprise_linux:3::es |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutilsRed Hat:enterprise_linux:3::ws |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-develRed Hat:enterprise_linux:3::ws |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelfRed Hat:enterprise_linux:3::ws |
before 0:0.94.1-2 | 0:0.94.1-2 |
elfutils-libelf-develRed Hat:enterprise_linux:3::ws |
before 0:0.94.1-2 | 0:0.94.1-2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1704 is a medium vulnerability (CVSS 4.6) in Gnu Gdb, published May 24, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 48th percentile. Fixed in gdb 6.3-6.
References
securityfocus.com/bid/13697
secunia.com/advisories/17072
trustix.org/errata/2005/0025
support.avaya.com/elmodocs2/security/ASA-2006-178.htm
Show 65 moreShow less
redhat.com/support/errata/RHSA-2006-0368.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=001060
vupen.com/english/advisories/2007/1267
mandriva.com/security/advisories?name=MDKSA-2005:215
usn.ubuntu.com/136-1
security.gentoo.org/glsa/glsa-200505-15.xml
gentoo.org/security/en/glsa/glsa-200506-01.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071
securitytracker.com/id?1016544
bugs.gentoo.org/show_bug.cgi?id=91398
vmware.com/support/vi3/doc/esx-55052-patch.html
osvdb.org/16757
nvd.nist.gov/vuln/detail/CVE-2005-1704
github.com/advisories/GHSA-r87q-q7hx-24jg
security-tracker.debian.org/tracker/CVE-2005-1704
access.redhat.com/errata/RHSA-2005:659
bugzilla.redhat.com/show_bug.cgi?id=157983
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_659.json
cve.org/CVERecord?id=CVE-2005-1704