Summary
Hanno Böck discovered that gdb incorrectly handled certain malformed AOUT
headers in PE executables. If a user or automated system were tricked into
processing a specially crafted binary, a remote attacker could use this
issue to cause gdb to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS.
(CVE-2014-8501)
It was discovered that gdb incorrectly handled printing bad bytes in Intel
Hex objects. If a user or automated system were tricked into processing a
specially crafted binary, a remote attacker could use this issue to cause
gdb to crash, resulting in a denial of service. This issue only applied to
Ubuntu 14.04 LTS. (CVE-2014-9939)
It was discovered that gdb incorrectly handled certain string operations.
If a user or automated system were tricked into processing a specially
crafted binary, a remote attacker could use this issue to cause gdb to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2016-2226)
It was discovered that gdb incorrectly handled parsing certain binaries. If
a user or automated system were tricked into processing a specially crafted
binary, a remote attacker could use this issue to cause gdb to crash,
resulting in a denial of service. This issue only applied to Ubuntu 14.04
LTS and Ubuntu 16.04 LTS. (CVE-2016-4487, CVE-2016-4488, CVE-2016-4489,
CVE-2016-4490, CVE-2016-4492, CVE-2016-4493, CVE-2016-6131)
It was discovered that gdb incorrectly handled parsing certain binaries. If
a user or automated system were tricked into processing a specially crafted
binary, a remote attacker could use this issue to cause gdb to crash,
resulting in a denial of service. (CVE-2016-4491)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gdb | 7.7.1-0ubuntu5~14.04.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | gdb | 7.11.1-0ubuntu1~16.5 |
Vulnerabilities 11
-
Unscored —
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cau…
-
Unscored —
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
-
Unscored —CVE-2016-2226 Public exploit
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrar…
-
Unscored —
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and …
-
Unscored —
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and …
-
Unscored —
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segment…
-
Unscored —
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault…
-
Unscored —
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentat…
-
Unscored —
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of servic…
-
Unscored —
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attac…
-
Unscored —
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and…
References
-
report
https://ubuntu.com/security/CVE-2014-8501
-
report
https://ubuntu.com/security/CVE-2014-9939
-
report
https://ubuntu.com/security/CVE-2016-2226
-
report
https://ubuntu.com/security/CVE-2016-4487
-
report
https://ubuntu.com/security/CVE-2016-4488
-
report
https://ubuntu.com/security/CVE-2016-4489
-
report
https://ubuntu.com/security/CVE-2016-4490
-
report
https://ubuntu.com/security/CVE-2016-4491
-
report
https://ubuntu.com/security/CVE-2016-4492
-
report
https://ubuntu.com/security/CVE-2016-4493
-
report
https://ubuntu.com/security/CVE-2016-6131