GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit     is reached. This can, for example, impede efforts to analyze malware with GDB. (CVE-2017-9778)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the crash package has been released.

According to the version of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gdb package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
221427	Linux Distros Unpatched Vulnerability : CVE-2017-9778	Nessus	Misc.	medium
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	critical
138007	EulerOS Virtualization 3.0.6.0 : gdb (EulerOS-SA-2020-1788)	Nessus	Huawei Local Security Checks	medium
132842	EulerOS Virtualization for ARM 64 3.0.5.0 : gdb (EulerOS-SA-2020-1088)	Nessus	Huawei Local Security Checks	medium
132301	EulerOS 2.0 SP3 : gdb (EulerOS-SA-2019-2584)	Nessus	Huawei Local Security Checks	medium
131632	EulerOS 2.0 SP2 : gdb (EulerOS-SA-2019-2479)	Nessus	Huawei Local Security Checks	medium
131345	EulerOS 2.0 SP8 : gdb (EulerOS-SA-2019-2279)	Nessus	Huawei Local Security Checks	medium
129122	EulerOS 2.0 SP5 : gdb (EulerOS-SA-2019-1965)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2017-9778

medium

Tenable Plugins

medium

critical

critical

medium

medium

medium

medium

medium

medium