OESA-2025-2412

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2412
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2412.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2025-2412
Upstream
Published
2025-10-17T14:54:08Z
Modified
2025-10-17T15:32:39.014745Z
Summary
gdb security update
Details

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A critical vulnerability was found in GNU Binutils version 2.45. This vulnerability is classified as CWE-122 heap-based buffer overflow. A heap overflow condition is a buffer overflow where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted are confidentiality, integrity, and availability. The exploit is available at sourceware.org and is declared as proof-of-concept. The code maintainer replied with "[f]ixed for 2.46". Applying the patch ea1a0737c7692737a644af极速时时彩0486b71e4a392极速时时彩cbca8 is able to eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11082)

A vulnerability classified as problematic was found in GNU Binutils 2.45. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect availability. It is possible to download the exploit at sourceware.org. It is declared as proof-of-concept. Applying the patch b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a is able to eliminate this problem. The bugfix is ready for download at sourceware.org.(CVE-2025-11494)

Database specific
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / gdb

Package

Name
gdb
Purl
pkg:rpm/openEuler/gdb&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.2-12.oe2003sp4

Ecosystem specific

{
    "x86_64": [
        "gdb-9.2-12.oe2003sp4.x86_64.rpm",
        "gdb-debuginfo-9.2-12.oe2003sp4.x86_64.rpm",
        "gdb-debugsource-9.2-12.oe2003sp4.x86_64.rpm",
        "gdb-gdbserver-9.2-12.oe2003sp4.x86_64.rpm",
        "gdb-headless-9.2-12.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "gdb-9.2-12.oe2003sp4.aarch64.rpm",
        "gdb-debuginfo-9.2-12.oe2003sp4.aarch64.rpm",
        "gdb-debugsource-9.2-12.oe2003sp4.aarch64.rpm",
        "gdb-gdbserver-9.2-12.oe2003sp4.aarch64.rpm",
        "gdb-headless-9.2-12.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "gdb-help-9.2-12.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "gdb-9.2-12.oe2003sp4.src.rpm"
    ]
}