Threats tagged 'ghsa-jq36-9pw3-8r4v'

A heap buffer overflow vulnerability exists in gdbserver's QTDPsrc packet handler, allowing an unauthenticated remote attacker to execute native code in the gdbserver process. This occurs due to a mismatch between a packet's declared source length and the actual data length, causing a heap overflow. The flaw affects gdbserver as shipped with Red Hat Enterprise Linux and can be exploited by an attacker with network access to the gdbserver port. There is no authentication in gdbserver, and no mitigation is currently available other than limiting network exposure.