CVE-2017-9778

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section

published June 21, 2017

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01113 · 65.5th percentile
Published
2017-06-21T07:00Z
EPSS history
Timeline
  • 21 JUN 07:00Z
    GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section
    cvelistv5