CVE-2019-1010180 Memory corruption in gdb
An out-of-bounds memory access in GNU gdb allows attackers to cause denial of service, disclose memory, or potentially execute code by opening a malicious ELF file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-1010180?
CVE-2019-1010180 is a high-severity memory corruption vulnerability in Opensuse Leap, published on 24 Jul 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
Weakness: CWE-125
Which versions are affected by CVE-2019-1010180?
It affects 2 products.
Linux distribution packages (32)
gdb Red Hat:enterprise_linux:8::appstream | All versions | 0:8.2-11.el8 |
gdb-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:8.2-11.el8 |
gdb-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:8.2-11.el8 |
gdb-doc Red Hat:enterprise_linux:8::appstream | All versions | 0:8.2-11.el8 |
gdb-gdbserver Red Hat:enterprise_linux:8::appstream | All versions | 0:8.2-11.el8 |
gdb-headless Red Hat:enterprise_linux:8::appstream | All versions | 0:8.2-11.el8 |
gdb SUSE:Enterprise Storage 5 | All versions | 8.3.1-2.14.1 |
gdb SUSE:HPE Helion OpenStack 8 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Module for Development Tools 15 | All versions | 8.3.1-3.13.1 |
gdb SUSE:Linux Enterprise Module for Development Tools 15 SP1 | All versions | 8.3.1-8.8.1 |
gdb SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 7.5.1-0.9.6.1 |
gdb SUSE:Linux Enterprise Server 12 SP1-LTSS | All versions | 8.3.1-1.12.1 |
gdb SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 8.3.1-1.12.1 |
gdb SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 8.3.1-1.12.1 |
gdb SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Server 12 SP3-LTSS | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Server 12 SP4 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Server 12 SP5 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 8.3.1-1.12.1 |
gdb SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 8.3.1-1.12.1 |
gdb SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 8.3.1-2.14.1 |
gdb SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 8.3.1-2.14.1 |
gdb SUSE:OpenStack Cloud 7 | All versions | 8.3.1-1.12.1 |
gdb SUSE:OpenStack Cloud 8 | All versions | 8.3.1-2.14.1 |
gdb SUSE:OpenStack Cloud Crowbar 8 | All versions | 8.3.1-2.14.1 |
gdb openSUSE:Leap 15.0 | All versions | 8.3.1-lp150.2.10.1 |
gdb openSUSE:Leap 15.1 | All versions | 8.3.1-lp151.4.3.1 |
gdb openSUSE:Tumbleweed | All versions | 10.1-11.2 |
Products include Gnu Gdb, Opensuse Leap.
How do I fix CVE-2019-1010180?
No fix published yet.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-1010180 being exploited?
There is no known exploitation of CVE-2019-1010180 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Leap
Sources
Also known as CLSA-2025-1764771100, CLSA-2026-1776693427, CLSA-2026-1777308938, CLSA-2026-1777446434, DEBIAN-CVE-2019-1010180, GHSA-rcgh-h6mp-4g9q and 12 more.