CVE-2019-1010180: gnu gdb Out-of-bounds Read
Vulnerability summary
CVE-2019-1010180 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in gnu gdb. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 24-07-2019PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
CVSS metrics
5 scores · 4 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sourceware.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse23 products
- gdb&distro=HPE Helion OpenStack 8< 8.3.1-2.14.1
- gdb&distro=SUSE Enterprise Storage 5< 8.3.1-2.14.1
- gdb&distro=SUSE Linux Enterprise Desktop 12 SP4< 8.3.1-2.14.1
- gdb&distro=SUSE Linux Enterprise Module for Development Tools 15< 8.3.1-3.13.1
- gdb&distro=SUSE Linux Enterprise Module for Development Tools 15 SP1< 8.3.1-8.8.1
Redhat6 products
- gdb< 0:8.2-11.el8
- gdb-debuginfo< 0:8.2-11.el8
- gdb-debugsource< 0:8.2-11.el8
- gdb-doc< 0:8.2-11.el8
- gdb-gdbserver< 0:8.2-11.el8
Opensuse4 products
- leapEOL15.0 | 15.1
- gdb&distro=openSUSE Leap 15.0< 8.3.1-lp150.2.10.1
- gdb&distro=openSUSE Leap 15.1< 8.3.1-lp151.4.3.1
- gdb&distro=openSUSE Tumbleweed< 10.1-11.2
Debian1 product
- binutils< 2.32.51.20190707-1
Gnu1 product
- gdbAll versions (At least as of date 2018-09-16) | < 9.1
Mageia1 product
- gdb< 8.2-8.1.mga7
Ubuntu1 product
- gdbAll versions (No fix recorded)
7 vendors · 37 products
References
35 links- sourceware.org/bugzilla/show_bug.cgi?id=23657X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-11/msg00029.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-11/msg00028.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 35 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory