ZeroHour

CVE-2017-9778

CVSS 3.0
5.5 medium
EPSS
1%p64
Published
()
Modified
Description

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

Vendors
gnu
Products
gdb
Weakness
CWE-20, CWE-770
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.