DEBIAN-CVE-2026-123151
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-123151
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-123151.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-123151
- Upstream
- CVE-2026-123151
- Published
- 2026-11-05T17:18:03Z
- Modified
- 2026-11-06T23:00:06Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.
- References
Affected packages
Debian:12 / gdb
Package
- Name
- gdb
- Purl
- pkg:deb/debian/gdb?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
13.*
13.1-3
13.2-1
13.2-1+hurd.3
15.*
15.1-1
15.2-1
15.2-2~exp1
16.*
16.0.90.20250111-1~exp1
16.0.90.20250111-1~exp2
16.1-1
16.1-2
16.1-2+hurd.1
16.2-1
16.2-2
16.2-3
16.2-4
16.2-5
16.2-6
16.2-7
16.2-8
16.3-1
16.3-2
16.3-3
16.3-4~bpo13+1
16.3-4~bpo13+2
16.3-4
16.3-5~bpo13+1
16.3-5
17.*
17.0.50.20250905-1~exp1
17.0.90-1~exp1
17.0.90-1~exp2
17.1-1~bpo13+1
17.1-1
17.1-2
17.1-3
17.1-4
17.2-1~bpo13+1
17.2-1
18.*
18.1-1
18.1-2
18.1-3~bpo13+1
18.1-3
Debian:13 / gdb
Package
- Name
- gdb
- Purl
- pkg:deb/debian/gdb?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Debian:14 / gdb
Package
- Name
- gdb
- Purl
- pkg:deb/debian/gdb?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected