CVE-2017-9778

Description

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.

Weakness classification

• CWE-20: Improper Input Validation
• CWE-770: Allocation of Resources Without Limits or Throttling

Primary references

• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Issue Tracking, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory