Threats tagged 'ghsa-px57-gjvm-vwfx'

A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker with network access to an exposed gdbserver port to read uninitialized heap memory and cause a denial of service. The disclosed heap content includes addresses that can aid in defeating ASLR, potentially facilitating further exploitation. This vulnerability affects gdbserver as shipped with Red Hat Enterprise Linux. There is no authentication in gdbserver, and no mitigation exists other than limiting network exposure.