CVE-2018-20657

gdb: The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and...

CVE-2018-20657 is fixed in 4 products on 1 platform, first by RHSA-2019:3352, released November 5, 2019. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0400
90th percentile

The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. Security Fix(es): * libiberty: Memory leak in demangle_template function resulting in a denial of service (CVE-2018-20657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
gdb · RHEL 8 0:8.2-6.el8 RHSA-2019:3352 Nov 5, 2019
gdb · ol 8 0:8.2-6.el8 ELSA-2019-3352 Nov 14, 2019
gdb-doc · RHEL 8 0:8.2-6.el8 RHSA-2019:3352 Nov 5, 2019
gdb-doc · ol 8 0:8.2-6.el8 ELSA-2019-3352 Nov 14, 2019
gdb-gdbserver · RHEL 8 0:8.2-6.el8 RHSA-2019:3352 Nov 5, 2019
gdb-gdbserver · ol 8 0:8.2-6.el8 ELSA-2019-3352 Nov 14, 2019
gdb-headless · RHEL 8 0:8.2-6.el8 RHSA-2019:3352 Nov 5, 2019
gdb-headless · ol 8 0:8.2-6.el8 ELSA-2019-3352 Nov 14, 2019