Vulnerability CVE-2006-4146


Published: 2006-08-31   Modified: 2012-02-12

Description:
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

Vendor: GNU
Product: GDB 
Version: 6.5;

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.1/10
6.4/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841
http://www.vupen.com/english/advisories/2007/3229
http://www.vupen.com/english/advisories/2006/4283
http://www.vupen.com/english/advisories/2006/3433
http://www.ubuntu.com/usn/usn-356-1
http://www.securityfocus.com/bid/19802
http://www.redhat.com/support/errata/RHSA-2007-0469.html
http://www.redhat.com/support/errata/RHSA-2007-0229.html
http://www.osvdb.org/28318
http://support.avaya.com/elmodocs2/security/ASA-2007-253.htm
http://securitytracker.com/id?1017138
http://security.gentoo.org/glsa/glsa-200711-23.xml
http://secunia.com/advisories/27706
http://secunia.com/advisories/26909
http://secunia.com/advisories/25934
http://secunia.com/advisories/25894
http://secunia.com/advisories/25632
http://secunia.com/advisories/25098
http://secunia.com/advisories/22662
http://secunia.com/advisories/22205
http://secunia.com/advisories/21713
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10463
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://lists.apple.com/archives/security-announce/2006/Oct/msg00000.html
http://docs.info.apple.com/article.html?artnum=304669
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc

Related CVE
CVE-2019-17451
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.
CVE-2019-17450
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
CVE-2019-16166
GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
CVE-2019-16165
GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.
CVE-2019-15847
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operati...
CVE-2019-15767
In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
CVE-2018-20969
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

Copyright 2019, cxsecurity.com

 

Back to Top