Advisories » MGASA-2018-0035

Updated gdb packages fix security vulnerability

Publication date: 03 Jan 2018
Modification date: 03 Jan 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2016-4491 , CVE-2016-6131

Description

It was discovered that gdb incorrectly handled parsing certain binaries. If
a user or automated system were tricked into processing a specially crafted
binary, a remote attacker could use this issue to cause gdb to crash,
resulting in a denial of service (CVE-2016-4491, CVE-2016-6131).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21376
• https://usn.ubuntu.com/usn/usn-3367-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4491
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6131

SRPMS

6/core

• gdb-7.12-16.1.mga6