The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code     execution (CVE-2019-1010180)

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit     is reached. This can, for example, impede efforts to analyze malware with GDB. (CVE-2017-9778)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode     at /gdb/ada-lang.c. (CVE-2023-39128)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function     add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function     pe_as16() at /gdb/coff-pe-read.c. (CVE-2023-39130)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the version of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gdb package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a     negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB     to repeatedly allocate memory until a process limit is     reached. This can, for example, impede efforts to     analyze malware with GDB.(CVE-2017-9778)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code     execution (CVE-2019-1010180)

  - GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed     section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit     is reached. This can, for example, impede efforts to analyze malware with GDB. (CVE-2017-9778)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion (CVE-2017-9778)

  - gdb: heap-buffer-overflow in pe_as16(void*) (CVE-2023-39130)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode     at /gdb/ada-lang.c. (CVE-2023-39128)

  - GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function     add_pe_exported_sym() at /gdb/coff-pe-read.c. (CVE-2023-39129)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
196539	RHEL 6 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
131345	EulerOS 2.0 SP8 : gdb (EulerOS-SA-2019-2279)	Nessus	Huawei Local Security Checks	11/27/2019	4/9/2024	medium
138007	EulerOS Virtualization 3.0.6.0 : gdb (EulerOS-SA-2020-1788)	Nessus	Huawei Local Security Checks	7/1/2020	3/5/2024	medium
132301	EulerOS 2.0 SP3 : gdb (EulerOS-SA-2019-2584)	Nessus	Huawei Local Security Checks	12/19/2019	4/3/2024	medium
132842	EulerOS Virtualization for ARM 64 3.0.5.0 : gdb (EulerOS-SA-2020-1088)	Nessus	Huawei Local Security Checks	1/13/2020	4/1/2024	medium
131632	EulerOS 2.0 SP2 : gdb (EulerOS-SA-2019-2479)	Nessus	Huawei Local Security Checks	12/4/2019	4/8/2024	medium
129122	EulerOS 2.0 SP5 : gdb (EulerOS-SA-2019-1965)	Nessus	Huawei Local Security Checks	9/23/2019	4/24/2024	medium
196579	RHEL 5 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
196611	RHEL 7 : gdb (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	medium

Detections

Analytics

Plugins Search

high

medium

medium

medium

medium

medium

medium

high

medium