GCVE - cpe:2.3:a:gnu:gdb:6.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gdb:6.5:*:*:*:*:*:*:*

part: a version: 6.5 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Gdb (`df886515-2c03-5299-9bb9-9c2e8e923be9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gdb`	purl2cpe	2026-06-01 10:11:54.558589
`pkg:deb/ubuntu/gdb`	purl2cpe	2026-06-01 10:11:54.558590
`pkg:github/bminor/binutils-gdb`	purl2cpe	2026-06-01 10:11:54.558592
`pkg:gitlab/redhat/gdb`	purl2cpe	2026-06-01 10:11:54.558594
`pkg:gnu/gdb`	purl2cpe	2026-06-01 10:11:54.558596
`pkg:rpm/centos/gdb`	purl2cpe	2026-06-01 10:11:54.558597
`pkg:rpm/fedora/gdb`	purl2cpe	2026-06-01 10:11:54.558599
`pkg:rpm/opensuse/gdb`	purl2cpe	2026-06-01 10:11:54.558601

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4355`	vulnerable	2026-06-08 04:59:30.913575	Details available GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts. Published: 2013-03-04T21:00:00.000Z Updated: 2024-08-07T00:09:18.432Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2013-0522.html http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src http://www.securitytracker.com/id/1028191	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4146`	vulnerable	2026-06-08 04:49:11.086045	Details available Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations. Published: 2006-08-31T22:00:00.000Z Updated: 2024-08-07T18:57:46.146Z Open on db.gcve.eu Reference links http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html http://www.vupen.com/english/advisories/2006/4283 http://secunia.com/advisories/25098 http://security.gentoo.org/glsa/glsa-200711-23.xml http://secunia.com/advisories/25894	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.