{"id":"CVE-2023-39129","aliases":["AZL-27630","AZL-27669","AZL-34639","AZL-34724","CLSA-2024-1721929836","CLSA-2024-1721929982","DEBIAN-CVE-2023-39129","EUVD-2023-42875","GHSA-295v-hjgh-6c75","MGASA-2024-0246","OESA-2023-1825","OESA-2023-1826","OESA-2023-1827","OESA-2023-1853","OESA-2023-1869","UBUNTU-CVE-2023-39129","USN-6842-1"],"status":"published","title":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the...","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00259,"percentile":0.17664,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-07-25T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"crash","fixed_in":["8.0.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gdb","fixed_in":["11.2-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"crash","fixed_in":["8.0.4-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gdb","fixed_in":["13.2-3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gdb","fixed_in":["9.2-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"gdb","fixed_in":["11.1-6.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"gdb","fixed_in":["11.1-7.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"gdb","fixed_in":["11.1-7.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdb","fixed_in":["7.11.1-0ubuntu1~16.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdb","fixed_in":["8.1.1-0ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gdb","fixed_in":["9.2-0ubuntu1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gdb","fixed_in":["12.1-0ubuntu1~22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"crash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"crash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.4-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gdb-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gdb-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gdb-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gdb-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13.1-3","13.2-1","13.2-1+hurd.3","15.1-1","15.2-1","15.2-2~exp1","16.0.90.20250111-1~exp1","16.0.90.20250111-1~exp2","16.1-1","16.1-2","16.1-2+hurd.1","16.2-1","16.2-2","16.2-3","16.2-4","16.2-5","16.2-6","16.2-7","16.2-8","16.3-1","16.3-2","16.3-3","16.3-4","16.3-4~bpo13+1","16.3-4~bpo13+2","16.3-5","16.3-5~bpo13+1","17.0.50.20250905-1~exp1","17.0.90-1~exp1","17.0.90-1~exp2","17.1-1","17.1-1~bpo13+1","17.1-2","17.1-3","17.1-4","17.2-1","17.2-1~bpo13+1","18.1-1","18.1-2","18.1-3","18.1-3~bpo13+1"]},{"source":"osv","ecosystem":"Debian:13","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.3-1","16.3-2","16.3-3","16.3-4","16.3-4~bpo13+1","16.3-4~bpo13+2","16.3-5","16.3-5~bpo13+1","17.0.50.20250905-1~exp1","17.0.90-1~exp1","17.0.90-1~exp2","17.1-1","17.1-1~bpo13+1","17.1-2","17.1-3","17.1-4","17.2-1","17.2-1~bpo13+1","18.1-1","18.1-2","18.1-3","18.1-3~bpo13+1"]},{"source":"osv","ecosystem":"Debian:14","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.3-1","16.3-2","16.3-3","16.3-4","16.3-4~bpo13+1","16.3-4~bpo13+2","16.3-5","16.3-5~bpo13+1","17.0.50.20250905-1~exp1","17.0.90-1~exp1","17.0.90-1~exp2","17.1-1","17.1-1~bpo13+1","17.1-2","17.1-3","17.1-4","17.2-1","17.2-1~bpo13+1","18.1-1","18.1-2","18.1-3","18.1-3~bpo13+1"]},{"source":"osv","ecosystem":"Mageia:9","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1-7.1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-6.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-7.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-7.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-7.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+esm1"}]}],"versions":["7.10-1ubuntu2","7.10-1ubuntu3","7.10.1-0ubuntu1","7.10.90.20160215-0ubuntu2","7.10.90.20160220-0ubuntu1","7.11-0ubuntu1","7.11.1-0ubuntu1~16.04","7.11.1-0ubuntu1~16.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+esm1"}]}],"versions":["8.0.1-0ubuntu1","8.0.1-0ubuntu2","8.0.1-0ubuntu3","8.1-0ubuntu1","8.1-0ubuntu2","8.1-0ubuntu3","8.1-0ubuntu3.1","8.1-0ubuntu3.2","8.1.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-0ubuntu1~20.04.2"}]}],"versions":["8.3-0ubuntu1","9.0.50.20191019-0ubuntu1","9.0.50.20191119-0ubuntu1","9.0.90.20191216-0ubuntu1","9.0.90.20200105-0ubuntu1","9.0.90.20200117-0ubuntu1","9.1-0ubuntu1","9.2-0ubuntu1~20.04","9.2-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1-0ubuntu1~22.04.2"}]}],"versions":["11.1-0ubuntu2","11.1-0ubuntu3","11.2-0ubuntu1","12.0.50.20220217-0ubuntu1","12.0.90-0ubuntu1","12.1-0ubuntu1~22.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.11.1-0ubuntu1~16.5+esm1"}]}],"versions":["7.10-1ubuntu2","7.10-1ubuntu3","7.10.1-0ubuntu1","7.10.90.20160215-0ubuntu2","7.10.90.20160220-0ubuntu1","7.11-0ubuntu1","7.11.1-0ubuntu1~16.04","7.11.1-0ubuntu1~16.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1-0ubuntu1+esm1"}]}],"versions":["8.0.1-0ubuntu1","8.0.1-0ubuntu2","8.0.1-0ubuntu3","8.1-0ubuntu1","8.1-0ubuntu2","8.1-0ubuntu3","8.1-0ubuntu3.1","8.1-0ubuntu3.2","8.1.1-0ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-0ubuntu1~20.04.2"}]}],"versions":["8.3-0ubuntu1","9.0.50.20191019-0ubuntu1","9.0.50.20191119-0ubuntu1","9.0.90.20191216-0ubuntu1","9.0.90.20200105-0ubuntu1","9.0.90.20200117-0ubuntu1","9.1-0ubuntu1","9.2-0ubuntu1~20.04","9.2-0ubuntu1~20.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1-0ubuntu1~22.04.2"}]}],"versions":["11.1-0ubuntu2","11.1-0ubuntu3","11.2-0ubuntu1","12.0.50.20220217-0ubuntu1","12.0.90-0ubuntu1","12.1-0ubuntu1~22.04"],"bundled":5}],"products":[{"vendor":"gnu","product":"gdb"}],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=30640","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39129","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-295v-hjgh-6c75"},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1721929836.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1721929982.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39129","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0246.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33319","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6842-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1825","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1826","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1827","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1853","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39130","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39130","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-39129","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T00:00:00Z","modified":"2024-10-24T14:10:49.318Z","updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-42875","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T00:00:00Z","modified":"2024-10-24T14:10:49Z","updated_at":"2026-11-03T00:05:20.595169Z"}],"ghsa":[{"id":"GHSA-295v-hjgh-6c75","title":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the...","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T21:31:32Z","modified":"2024-04-04T06:21:16Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:56:41.519501Z"}],"nvd":[{"id":"CVE-2023-39129","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11.8Z","modified":"2026-06-17T06:11:36.64Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:18.687088Z"}],"osv":[{"id":"AZL-27630","title":"CVE-2023-39129 affecting package crash for versions less than 8.0.1-3","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11Z","modified":"2026-04-21T04:24:24.671691Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-27669","title":"CVE-2023-39129 affecting package gdb for versions less than 11.2-3","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11Z","modified":"2026-04-21T04:24:30.573141Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-34639","title":"CVE-2023-39129 affecting package crash for versions less than 8.0.4-3","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11Z","modified":"2026-04-21T04:34:12.586942Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-34724","title":"CVE-2023-39129 affecting package gdb for versions less than 13.2-3","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"CVE-2023-39129","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11.8Z","modified":"2026-04-16T04:42:08.307929806Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"DEBIAN-CVE-2023-39129","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:11.8Z","modified":"2026-10-26T18:03:06.232318788Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"OESA-2023-1825","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.(CVE-2023-39129)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:18:03.036908981Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1826","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.(CVE-2023-39129)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:17:57.207586069Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1827","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.(CVE-2023-39129)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:17:57.245305126Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1853","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.(CVE-2023-39129)","status":"published","published":"2023-11-24T11:06:18Z","modified":"2026-08-18T01:18:03.810358775Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1869","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.(CVE-2023-39129)\r\n\r\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.(CVE-2023-39130)","status":"published","published":"2023-12-01T11:06:19Z","modified":"2026-08-18T01:18:03.978335083Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"UBUNTU-CVE-2023-39129","description":"GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.","status":"published","published":"2023-07-25T19:15:00Z","modified":"2026-02-04T02:51:36.898019Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"CLSA-2024-1721929836","title":"Fix CVE(s): CVE-2023-39128, CVE-2023-39129, CVE-2023-39130","description":"   * SECURITY UPDATE: stack buffer overflow in ada_decode\n     - debian/patches/CVE-2023-39128.patch: Fix stack buffer overflow\n     - CVE-2023-39128\n   * SECURITY UPDATE: stack buffer overflow\n     - debian/patches/CVE-2023-39129.patch: Verify COFF symbol stringtab offset\n       and fix problem with 32bit architecture build\n     - CVE-2023-39129\n   * SECURITY UPDATE: heap buffer overflow\n     - debian/patches/CVE-2023-39130.patch: bfd IO functions give\n       warnings\n     - CVE-2023-39130","status":"published","published":"2024-07-25T17:50:39Z","modified":"2026-06-04T10:03:41.016127Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1721929982","title":"Fix CVE(s): CVE-2023-39128, CVE-2023-39129, CVE-2023-39130","description":"   * SECURITY UPDATE: stack buffer overflow in ada_decode\n     - debian/patches/CVE-2023-39128.patch: Fix stack buffer overflow\n     - CVE-2023-39128\n   * SECURITY UPDATE: stack buffer overflow\n     - debian/patches/CVE-2023-39129.patch: Verify COFF symbol stringtab offset\n       and fix problem with 32bit architecture build\n     - CVE-2023-39129\n   * SECURITY UPDATE: heap buffer overflow\n     - debian/patches/CVE-2023-39130.patch: bfd IO functions give\n       warnings\n     - CVE-2023-39130","status":"published","published":"2024-07-25T17:53:05Z","modified":"2026-06-04T10:04:13.555582Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"MGASA-2024-0246","title":"Updated gdb packages fix security vulnerabilities","description":"An illegal memory access flaw was found in the binutils package. Parsing\nan ELF file containing corrupt symbol version information may result in\na denial of service. This issue is the result of an incomplete fix for\nCVE-2020-16599. (CVE-2022-4285)\nA potential heap based buffer overflow was found in\n_bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of\navailability. (CVE-2023-1972)\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack\noverflow via the function ada_decode at /gdb/ada-lang.c.\n(CVE-2023-39128)\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use\nafter free via the function add_pe_exported_sym() at\n/gdb/coff-pe-read.c. (CVE-2023-39129)\nGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap\nbuffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.\n(CVE-2023-39130)\n","status":"published","published":"2024-07-01T17:53:27Z","modified":"2026-04-16T04:44:03.39345293Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"USN-6842-1","title":"gdb vulnerabilities","description":"It was discovered that gdb incorrectly handled certain memory operations\nwhen parsing an ELF file. An attacker could possibly use this issue\nto cause a denial of service. This issue is the result of an\nincomplete fix for CVE-2020-16599. This issue only affected\nUbuntu 22.04 LTS. (CVE-2022-4285)\n\nIt was discovered that gdb incorrectly handled memory leading\nto a heap based buffer overflow. An attacker could use this \nissue to cause a denial of service, or possibly execute \narbitrary code. This issue only affected Ubuntu 22.04 LTS. \n(CVE-2023-1972)\n\nIt was discovered that gdb incorrectly handled memory leading\nto a stack overflow. An attacker could possibly use this issue\nto cause a denial of service. This issue only affected \nUbuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. \n(CVE-2023-39128)\n\nIt was discovered that gdb had a use after free vulnerability\nunder certain circumstances. An attacker could use this to cause \na denial of service or possibly execute arbitrary code. This issue \nonly affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS \nand Ubuntu 22.04 LTS. (CVE-2023-39129)\n\nIt was discovered that gdb incorrectly handled memory leading to a \nheap based buffer overflow. An attacker could use this issue to cause\na denial of service, or possibly execute arbitrary code. This issue \nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2023-39130)\n","status":"published","published":"2024-06-20T06:07:08Z","modified":"2026-06-25T13:32:28.810293929Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}