UBUNTU-CVE-2026-123151

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-123151

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-123151

Upstream

CVE-2026-123151

Published

2026-11-06T00:00:00Z

Modified

2026-11-07T01:46:33Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.

References

Affected packages

Ubuntu:20.04:LTS

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.3-0ubuntu1

9.*

9.0.50.20191019-0ubuntu1

9.0.50.20191119-0ubuntu1

9.0.90.20191216-0ubuntu1

9.0.90.20200105-0ubuntu1

9.0.90.20200117-0ubuntu1

9.1-0ubuntu1

9.2-0ubuntu1~20.04

9.2-0ubuntu1~20.04.1

9.2-0ubuntu1~20.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "9.2-0ubuntu1~20.04.2"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "9.2-0ubuntu1~20.04.2"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "9.2-0ubuntu1~20.04.2"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "9.2-0ubuntu1~20.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"

Ubuntu:22.04:LTS

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.1-0ubuntu2

11.1-0ubuntu3

11.2-0ubuntu1

12.*

12.0.50.20220217-0ubuntu1

12.0.90-0ubuntu1

12.1-0ubuntu1~22.04

12.1-0ubuntu1~22.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "12.1-0ubuntu1~22.04.2"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "12.1-0ubuntu1~22.04.2"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "12.1-0ubuntu1~22.04.2"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "12.1-0ubuntu1~22.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"

Ubuntu:24.04:LTS

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

14.*

14.0.50.20230907-0ubuntu1

14.1-0ubuntu1

14.1-0ubuntu2

15.*

15.0.50.20240219-0ubuntu1

15.0.50.20240320-0ubuntu1

15.0.50.20240403-0ubuntu1

15.1-1ubuntu1~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "15.1-1ubuntu1~24.04.1"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "15.1-1ubuntu1~24.04.1"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "15.1-1ubuntu1~24.04.1"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "15.1-1ubuntu1~24.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"

Ubuntu:26.04:LTS

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

16.*

16.3-1ubuntu2

16.3-5ubuntu1

17.*

17.1-1ubuntu1

17.1-1ubuntu2

17.1-2ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "17.1-2ubuntu1"
        },
        {
            "binary_name": "gdb-minimal",
            "binary_version": "17.1-2ubuntu1"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "17.1-2ubuntu1"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "17.1-2ubuntu1"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "17.1-2ubuntu1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"

Ubuntu:26.10

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=stonking

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

17.*

17.1-2ubuntu1

17.2-1ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "17.2-1ubuntu1"
        },
        {
            "binary_name": "gdb-minimal",
            "binary_version": "17.2-1ubuntu1"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "17.2-1ubuntu1"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "17.2-1ubuntu1"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "17.2-1ubuntu1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"

Ubuntu:Pro:16.04:LTS

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=esm-infra%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.10-1ubuntu2

7.10-1ubuntu3

7.10.1-0ubuntu1

7.10.90.20160215-0ubuntu2

7.10.90.20160220-0ubuntu1

7.11-0ubuntu1

7.11.1-0ubuntu1~16.04

7.11.1-0ubuntu1~16.5

7.11.1-0ubuntu1~16.5+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "7.11.1-0ubuntu1~16.5+esm1"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "7.11.1-0ubuntu1~16.5+esm1"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "7.11.1-0ubuntu1~16.5+esm1"
        },
        {
            "binary_name": "gdb64",
            "binary_version": "7.11.1-0ubuntu1~16.5+esm1"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "7.11.1-0ubuntu1~16.5+esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"

Ubuntu:Pro:18.04:LTS

gdb

Package

Name: gdb
Purl: pkg:deb/ubuntu/gdb?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

8.*

8.0.1-0ubuntu1

8.0.1-0ubuntu2

8.0.1-0ubuntu3

8.1-0ubuntu1

8.1-0ubuntu2

8.1-0ubuntu3

8.1-0ubuntu3.1

8.1-0ubuntu3.2

8.1.1-0ubuntu1

8.1.1-0ubuntu1+esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gdb",
            "binary_version": "8.1.1-0ubuntu1+esm1"
        },
        {
            "binary_name": "gdb-multiarch",
            "binary_version": "8.1.1-0ubuntu1+esm1"
        },
        {
            "binary_name": "gdb-source",
            "binary_version": "8.1.1-0ubuntu1+esm1"
        },
        {
            "binary_name": "gdbserver",
            "binary_version": "8.1.1-0ubuntu1+esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-123151.json"