Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure GDB versions before 13.2-5 allow local memory overwrite
published 1 year ago
Summary
The GDB debugger used on Azure systems prior to version 13.2-5 can be tricked into writing data outside its intended memory area. This could let someone with access to the same machine cause the program to crash or run unwanted code. Updating GDB to the latest release or applying the provided patch resolves the issue.
What to do
- Update azure gdb to version 13.2-5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | gdb |
< 13.2-5 Fix: upgrade to 13.2-5
|
Original advisory text
CVE-2025-7546 affecting package gdb for versions less than 13.2-5
A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.
References
Timeline
Published13 Jul 2025
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-65400 · OSV
Track software like this
Free during beta