CVE-2011-4355: gnu gdb

CVSS: 6.9v2.0MediumModified

AliasesRHSA-2013:0522UBUNTU-CVE-2011-4355DEBIAN-CVE-2011-4355

Published 04-03-2013Last modified 07-08-2024

Vulnerability summary

CVE-2011-4355 is a medium (CVSS 6.9) vulnerability in gnu gdb. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.3% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.36%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

04-03-2013
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

28%

Versus all other CVEs

30-day change

0.00 pp

From 0.36% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Redhat3 products

gdb< 0:7.2-60.el6
gdb-debuginfo< 0:7.2-60.el6
gdb-gdbserver< 0:7.2-60.el6

Debian1 product

gdb< 7.6-1

Gnu1 product

gdb≤ 7.4.1 | 4.18 | 5.0 | 5.0.92 | 5.0.93 | 5.1 | 5.1.1 | 5.2 | 5.2.1 | 5.3 | 6.0 | 6.1 | 6.1.1 | 6.2 | 6.2.1 | 6.3 | 6.4 | 6.5 | 6.6 | 6.7 | 6.7.1 | 6.8 | 7.0 | 7.0.1 | 7.1 | 7.2 | 7.3 | 7.3.1 | 7.4

Ubuntu1 product