This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-9778 →

DEBIAN-CVE-2017-9778

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can...

Original description

The description as published by the source.

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 gdb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-1"}]}]

Debian:13 gdb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-1"}]}]

Debian:14 gdb

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-1"}]}]

References

advisory security-tracker.debian.org