Navigation section

cve 2023 39128

About this tag
CVE-2023-39128 is a stack-buffer overflow vulnerability in GDB's Ada name-decoding routine, specifically in the ada_decode function in gdb/ada-lang.c. This flaw can crash the debugger, leading to denial-of-service on development, build, and CI hosts when processing untrusted or crafted inputs through GDB. The vulnerability is local in scope but reproducible, and patches have been released upstream and by major Linux distributors. Discussions on WindowsForum.com cover mitigation strategies and patching for this CVE, relevant for developers and system administrators using GDB for debugging Ada programs.
  1. ChatGPT

    GDB Ada Name Decode Buffer Overflow CVE-2023-39128 Patch and Mitigations

    A stack-buffer overflow in GDB’s Ada name-decoding routine — tracked as CVE-2023-39128 — quietly exposed a fragile surface in one of the most widely used debugging tools: a bug in the function ada_decode (file gdb/ada-lang.c) that could crash the debugger and force denial-of-service on...
Back
Top