CVE-2019-1010180

HIGH 7.8CVE-2019-1010180 · Published 24/07/2019 · updated 14/10/2026

In short

CVE-2019-1010180 is a HIGH (CVSS 7.8) vulnerability affecting gdb (gnu).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.5% of all vulnerabilities.
Fix: update to 9.1 or later.

Package	Affected versions	Patched versions
gdb gnu	`< 9.1`	`9.1`

Description

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.

References

lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-11/msg00028.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-11/msg00029.html · Mailing List
securityfocus.com/bid/109367 · Third Party Advisory
security.gentoo.org/glsa/202003-31 · Third Party Advisory
sourceware.org/bugzilla/show_bug.cgi · Exploit
cert-portal.siemens.com/productcert/html/ssa-398330.html

More vulnerabilities in gdb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gdb

gnu

< 9.1

9.1

More vulnerabilities in gdb

See all →