Skip to content
OpenAdvisories
Low ALAS2-2024-2685 3 CVEs

Low: gdb security update (Amazon Linux 2)

Published Oct 24, 2024 · Updated Oct 31, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-39130: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. CVE-2023-39129: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c. CVE-2023-39128: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 gdb 0:8.0.1-36.amzn2.0.2
Amazon Linux · 2 gdb-debuginfo 0:8.0.1-36.amzn2.0.2
Amazon Linux · 2 gdb-doc 0:8.0.1-36.amzn2.0.2
Amazon Linux · 2 gdb-gdbserver 0:8.0.1-36.amzn2.0.2

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39128.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39129.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39130.html