Description
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gdb | 6.3-6 | — |
| Debian 13 | gdb | 6.3-6 | — |
| Debian 12 | gdb | 6.3-6 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | binutils | 2.15.92.0.2-15 | RHSA-2005:673 |
| RHEL 4 | elfutils +3 | 0.97.1-3 | RHSA-2006:0354 |
| RHEL 4 | gdb | 6.3.0.0-1.63 | RHSA-2005:709 |
| RHEL 3 | binutils | 2.14.90.0.4-39 | RHSA-2005:659 |
| RHEL 3 | elfutils +3 | 0.94.1-2 | RHSA-2006:0368 |
Advisories 5
- RHSA-2006:0354 Red Hat Security Advisory: elfutils security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0368 Red Hat Security Advisory: elfutils security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:709 Red Hat Security Advisory: gdb security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:673 Red Hat Security Advisory: binutils security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:659 Red Hat Security Advisory: binutils security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 13697 vdb-entry
- 17072 third-party-advisory
- 21122 third-party-advisory
- 2005-0025 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm
- http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf
- RHSA-2006:0368 vendor-advisory
- 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates mailing-list
- 18506 third-party-advisory
- CLA-2006:1060 vendor-advisory
- RHSA-2005:709 vendor-advisory
- ADV-2007-1267 vdb-entry
- 21262 third-party-advisory
- RHSA-2005:673 vendor-advisory
- MDKSA-2005:215 vendor-advisory
- 17001 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm
- RHSA-2006:0354 vendor-advisory
- RHSA-2005:801 vendor-advisory
- RHSA-2005:763 vendor-advisory
- 24788 third-party-advisory
- USN-136-1 vendor-advisory
- GLSA-200505-15 vendor-advisory
- GLSA-200506-01 vendor-advisory
- oval:org.mitre.oval:def:9071 vdb-entry signature
- MDKSA-2005:095 vendor-advisory
- 15527 third-party-advisory
- 17257 third-party-advisory
- 17135 third-party-advisory
- 17356 third-party-advisory
- 1016544 vdb-entry
- 17718 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=91398
- http://www.vmware.com/support/vi3/doc/esx-55052-patch.html
- 16757 vdb-entry
- 21717 third-party-advisory
- RHSA-2005:659 vendor-advisory