Unscored severity · published Mar 5, 2013
CVE-2011-4355
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain…
–
CVSS
0.4%
EPSS
No
On KEV
Description
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdb · Gnu
through 7.4.1; 4.18; 5.0; 5.0.92; 5.0.93; 5.1; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4355
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4355
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0522.html
sourceware.org
http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src
sourceware.org
http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html
sourceware.org
http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html
www.securitytracker.com
http://www.securitytracker.com/id/1028191
More from Gdb
7.8
CVE-2019-1010180
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access
5.5
CVE-2023-39130
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c
5.5
CVE-2023-39129
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c
5.5
CVE-2023-39128
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c
5.5
CVE-2017-9778
GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section