RHSA-2005:709
Vulnerability from csaf_redhat - Published: 2005-10-05 11:55 - Updated: 2026-06-25 10:32Summary
Red Hat Security Advisory: gdb security update
Severity
Low
Notes
Topic: An updated gdb package that fixes several bugs and minor security issues is
now available.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details: GDB, the GNU debugger, allows debugging of programs written in C, C++,
and other languages by executing them in a controlled fashion, then
printing their data.
Several integer overflow bugs were found in gdb. If a user is tricked
into processing a specially crafted executable file, it may allow the
execution of arbitrary code as the user running gdb. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-1704 to this issue.
A bug was found in the way gdb loads .gdbinit files. When a user executes
gdb, the local directory is searched for a .gdbinit file which is then
loaded. It is possible for a local user to execute arbitrary commands as
the victim running gdb by placing a malicious .gdbinit file in a location
where gdb may be run. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-1705 to this issue.
This updated package also addresses the following issues:
- GDB on ia64 had previously implemented a bug fix to work-around a kernel
problem when creating a core file via gcore. The bug fix caused a
significant slow-down of gcore.
- GDB on ia64 issued an extraneous warning when gcore was used.
- GDB on ia64 could not backtrace over a sigaltstack.
- GDB on ia64 could not successfully do an info frame for a signal trampoline.
- GDB on AMD64 and Intel EM64T had problems attaching to a 32-bit process.
- GDB on AMD64 and Intel EM64T was not properly handling threaded watchpoints.
- GDB could not build with gcc4 when -Werror flag was set.
- GDB had problems printing inherited members of C++ classes.
- A few updates from mainline sources concerning Dwarf2 partial die in
cache support, follow-fork support, interrupted syscall support, and
DW_OP_piece read support.
All users of gdb should upgrade to this updated package, which resolves
these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-debuginfo-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-debuginfo-0:6.3.0.0-1.63.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-debuginfo-0:6.3.0.0-1.63.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:gdb-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:gdb-0:6.3.0.0-1.63.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:gdb-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-0:6.3.0.0-1.63.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-0:6.3.0.0-1.63.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-debuginfo-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-debuginfo-0:6.3.0.0-1.63.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:gdb-debuginfo-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-0:6.3.0.0-1.63.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-0:6.3.0.0-1.63.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-debuginfo-0:6.3.0.0-1.63.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-debuginfo-0:6.3.0.0-1.63.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
Affected products
Fixed
32 products, the same list as for
CVE-2005-1704
Threats
Impact
Low
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated gdb package that fixes several bugs and minor security issues is\nnow available.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "GDB, the GNU debugger, allows debugging of programs written in C, C++,\nand other languages by executing them in a controlled fashion, then\nprinting their data.\n\nSeveral integer overflow bugs were found in gdb. If a user is tricked\ninto processing a specially crafted executable file, it may allow the\nexecution of arbitrary code as the user running gdb. The Common\nVulnerabilities and Exposures project (cve.mitre.org) has assigned the name\nCAN-2005-1704 to this issue.\n\nA bug was found in the way gdb loads .gdbinit files. When a user executes\ngdb, the local directory is searched for a .gdbinit file which is then\nloaded. It is possible for a local user to execute arbitrary commands as\nthe victim running gdb by placing a malicious .gdbinit file in a location\nwhere gdb may be run. The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2005-1705 to this issue.\n\nThis updated package also addresses the following issues:\n\n- GDB on ia64 had previously implemented a bug fix to work-around a kernel\nproblem when creating a core file via gcore. The bug fix caused a\nsignificant slow-down of gcore.\n\n- GDB on ia64 issued an extraneous warning when gcore was used.\n\n- GDB on ia64 could not backtrace over a sigaltstack.\n\n- GDB on ia64 could not successfully do an info frame for a signal trampoline.\n\n- GDB on AMD64 and Intel EM64T had problems attaching to a 32-bit process.\n\n- GDB on AMD64 and Intel EM64T was not properly handling threaded watchpoints.\n\n- GDB could not build with gcc4 when -Werror flag was set.\n\n- GDB had problems printing inherited members of C++ classes.\n\n- A few updates from mainline sources concerning Dwarf2 partial die in\ncache support, follow-fork support, interrupted syscall support, and\nDW_OP_piece read support.\n\nAll users of gdb should upgrade to this updated package, which resolves\nthese issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2005:709",
"url": "https://access.redhat.com/errata/RHSA-2005:709"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "158680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=158680"
},
{
"category": "external",
"summary": "158684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=158684"
},
{
"category": "external",
"summary": "160339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=160339"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_709.json"
}
],
"title": "Red Hat Security Advisory: gdb security update",
"tracking": {
"current_release_date": "2026-06-25T10:32:50+00:00",
"generator": {
"date": "2026-06-25T10:32:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.1.0"
}
},
"id": "RHSA-2005:709",
"initial_release_date": "2005-10-05T11:55:00+00:00",
"revision_history": [
{
"date": "2005-10-05T11:55:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2005-10-05T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-25T10:32:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.ia64",
"product": {
"name": "gdb-0:6.3.0.0-1.63.ia64",
"product_id": "gdb-0:6.3.0.0-1.63.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"product": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"product_id": "gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb-debuginfo@6.3.0.0-1.63?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.i386",
"product": {
"name": "gdb-0:6.3.0.0-1.63.i386",
"product_id": "gdb-0:6.3.0.0-1.63.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"product": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"product_id": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb-debuginfo@6.3.0.0-1.63?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.src",
"product": {
"name": "gdb-0:6.3.0.0-1.63.src",
"product_id": "gdb-0:6.3.0.0-1.63.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.x86_64",
"product": {
"name": "gdb-0:6.3.0.0-1.63.x86_64",
"product_id": "gdb-0:6.3.0.0-1.63.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"product": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"product_id": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb-debuginfo@6.3.0.0-1.63?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.ppc64",
"product": {
"name": "gdb-0:6.3.0.0-1.63.ppc64",
"product_id": "gdb-0:6.3.0.0-1.63.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"product": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"product_id": "gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb-debuginfo@6.3.0.0-1.63?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.s390x",
"product": {
"name": "gdb-0:6.3.0.0-1.63.s390x",
"product_id": "gdb-0:6.3.0.0-1.63.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"product": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"product_id": "gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb-debuginfo@6.3.0.0-1.63?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gdb-0:6.3.0.0-1.63.s390",
"product": {
"name": "gdb-0:6.3.0.0-1.63.s390",
"product_id": "gdb-0:6.3.0.0-1.63.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb@6.3.0.0-1.63?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gdb-debuginfo-0:6.3.0.0-1.63.s390",
"product": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.s390",
"product_id": "gdb-debuginfo-0:6.3.0.0-1.63.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gdb-debuginfo@6.3.0.0-1.63?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.ia64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.ppc64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.s390"
},
"product_reference": "gdb-0:6.3.0.0-1.63.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.s390x"
},
"product_reference": "gdb-0:6.3.0.0-1.63.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.src"
},
"product_reference": "gdb-0:6.3.0.0-1.63.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-debuginfo-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-debuginfo-0:6.3.0.0-1.63.ia64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-debuginfo-0:6.3.0.0-1.63.ppc64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390x"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gdb-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gdb-0:6.3.0.0-1.63.src"
},
"product_reference": "gdb-0:6.3.0.0-1.63.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gdb-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-0:6.3.0.0-1.63.ia64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-0:6.3.0.0-1.63.src"
},
"product_reference": "gdb-0:6.3.0.0-1.63.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-debuginfo-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-debuginfo-0:6.3.0.0-1.63.ia64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-0:6.3.0.0-1.63.ia64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-0:6.3.0.0-1.63.src"
},
"product_reference": "gdb-0:6.3.0.0-1.63.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-debuginfo-0:6.3.0.0-1.63.i386"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-debuginfo-0:6.3.0.0-1.63.ia64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
},
"product_reference": "gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2005-1704",
"discovery_date": "2005-05-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617660"
}
],
"notes": [
{
"category": "description",
"text": "Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"4AS:gdb-0:6.3.0.0-1.63.i386",
"4AS:gdb-0:6.3.0.0-1.63.ia64",
"4AS:gdb-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-0:6.3.0.0-1.63.s390",
"4AS:gdb-0:6.3.0.0-1.63.s390x",
"4AS:gdb-0:6.3.0.0-1.63.src",
"4AS:gdb-0:6.3.0.0-1.63.x86_64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-0:6.3.0.0-1.63.src",
"4Desktop:gdb-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-0:6.3.0.0-1.63.i386",
"4ES:gdb-0:6.3.0.0-1.63.ia64",
"4ES:gdb-0:6.3.0.0-1.63.src",
"4ES:gdb-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-0:6.3.0.0-1.63.i386",
"4WS:gdb-0:6.3.0.0-1.63.ia64",
"4WS:gdb-0:6.3.0.0-1.63.src",
"4WS:gdb-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-1704"
},
{
"category": "external",
"summary": "RHBZ#1617660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617660"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-1704",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-1704"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1704",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1704"
}
],
"release_date": "2005-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2005-10-05T11:55:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/",
"product_ids": [
"4AS:gdb-0:6.3.0.0-1.63.i386",
"4AS:gdb-0:6.3.0.0-1.63.ia64",
"4AS:gdb-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-0:6.3.0.0-1.63.s390",
"4AS:gdb-0:6.3.0.0-1.63.s390x",
"4AS:gdb-0:6.3.0.0-1.63.src",
"4AS:gdb-0:6.3.0.0-1.63.x86_64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-0:6.3.0.0-1.63.src",
"4Desktop:gdb-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-0:6.3.0.0-1.63.i386",
"4ES:gdb-0:6.3.0.0-1.63.ia64",
"4ES:gdb-0:6.3.0.0-1.63.src",
"4ES:gdb-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-0:6.3.0.0-1.63.i386",
"4WS:gdb-0:6.3.0.0-1.63.ia64",
"4WS:gdb-0:6.3.0.0-1.63.src",
"4WS:gdb-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2005:709"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2005-1705",
"discovery_date": "2005-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617661"
}
],
"notes": [
{
"category": "description",
"text": "gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"4AS:gdb-0:6.3.0.0-1.63.i386",
"4AS:gdb-0:6.3.0.0-1.63.ia64",
"4AS:gdb-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-0:6.3.0.0-1.63.s390",
"4AS:gdb-0:6.3.0.0-1.63.s390x",
"4AS:gdb-0:6.3.0.0-1.63.src",
"4AS:gdb-0:6.3.0.0-1.63.x86_64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-0:6.3.0.0-1.63.src",
"4Desktop:gdb-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-0:6.3.0.0-1.63.i386",
"4ES:gdb-0:6.3.0.0-1.63.ia64",
"4ES:gdb-0:6.3.0.0-1.63.src",
"4ES:gdb-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-0:6.3.0.0-1.63.i386",
"4WS:gdb-0:6.3.0.0-1.63.ia64",
"4WS:gdb-0:6.3.0.0-1.63.src",
"4WS:gdb-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-1705"
},
{
"category": "external",
"summary": "RHBZ#1617661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-1705",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-1705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1705"
}
],
"release_date": "2005-05-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2005-10-05T11:55:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/",
"product_ids": [
"4AS:gdb-0:6.3.0.0-1.63.i386",
"4AS:gdb-0:6.3.0.0-1.63.ia64",
"4AS:gdb-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-0:6.3.0.0-1.63.s390",
"4AS:gdb-0:6.3.0.0-1.63.s390x",
"4AS:gdb-0:6.3.0.0-1.63.src",
"4AS:gdb-0:6.3.0.0-1.63.x86_64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.ppc64",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.s390x",
"4AS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-0:6.3.0.0-1.63.src",
"4Desktop:gdb-0:6.3.0.0-1.63.x86_64",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4Desktop:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-0:6.3.0.0-1.63.i386",
"4ES:gdb-0:6.3.0.0-1.63.ia64",
"4ES:gdb-0:6.3.0.0-1.63.src",
"4ES:gdb-0:6.3.0.0-1.63.x86_64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4ES:gdb-debuginfo-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-0:6.3.0.0-1.63.i386",
"4WS:gdb-0:6.3.0.0-1.63.ia64",
"4WS:gdb-0:6.3.0.0-1.63.src",
"4WS:gdb-0:6.3.0.0-1.63.x86_64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.i386",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.ia64",
"4WS:gdb-debuginfo-0:6.3.0.0-1.63.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2005:709"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "security flaw"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…