PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2017-9778

CVE-2017-9778

gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.0

Review impact separately from score.

Published · June 15, 2017

Updated · May 13, 2026

Description

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 · Uncontrolled Resource Consumption