Skip to content
OpenAdvisories
Low ALAS2023-2024-738 3 CVEs

Low: gdb security update (Amazon Linux 2023)

Published Oct 10, 2024 · Updated Oct 14, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39130: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. CVE-2023-39129: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c. CVE-2023-39128: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2023 gdb 0:12.1-5.amzn2023.0.4
Amazon Linux · 2023 gdb-debuginfo 0:12.1-5.amzn2023.0.4
Amazon Linux · 2023 gdb-debugsource 0:12.1-5.amzn2023.0.4
Amazon Linux · 2023 gdb-doc 0:12.1-5.amzn2023.0.4
Amazon Linux · 2023 gdb-gdbserver 0:12.1-5.amzn2023.0.4
Amazon Linux · 2023 gdb-headless 0:12.1-5.amzn2023.0.4
Amazon Linux · 2023 gdb-minimal 0:12.1-5.amzn2023.0.4

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39128.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39129.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39130.html