Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffer.

Etkilenen sürümler6 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-121995 Diğer

Kayıt geçmişi

1. 5 Kas 2026 19:08Yayımlandı

İlgili açıklar

• 6,6 CVE-2026-111253Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transaction
• 8,1 CVE-2026-121997Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
• 8,2 CVE-2026-121996Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
• 8,8 CVE-2026-121994Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
• 6,5 CVE-2026-121259Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator
• 6,5 CVE-2026-119843Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags