GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.
{
"binaries": [
{
"binary_name": "gdb",
"binary_version": "7.11.1-0ubuntu1~16.5+esm1"
},
{
"binary_name": "gdb-multiarch",
"binary_version": "7.11.1-0ubuntu1~16.5+esm1"
},
{
"binary_name": "gdb-source",
"binary_version": "7.11.1-0ubuntu1~16.5+esm1"
},
{
"binary_name": "gdb64",
"binary_version": "7.11.1-0ubuntu1~16.5+esm1"
},
{
"binary_name": "gdbserver",
"binary_version": "7.11.1-0ubuntu1~16.5+esm1"
}
]
}
{
"binaries": [
{
"binary_name": "gdb",
"binary_version": "8.1.1-0ubuntu1+esm1"
},
{
"binary_name": "gdb-multiarch",
"binary_version": "8.1.1-0ubuntu1+esm1"
},
{
"binary_name": "gdb-source",
"binary_version": "8.1.1-0ubuntu1+esm1"
},
{
"binary_name": "gdbserver",
"binary_version": "8.1.1-0ubuntu1+esm1"
}
]
}