Dashboard / CVE-2026-123151

CVE-2026-123151

HIGH
MEDIUM Priority: 0.04 BB Relevance: 75/100
Published: 2026-11-05 Modified: 2026-11-06 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.

Weakness Classification (1)

References & Advisories (2)

https://bugzilla.redhat.com/show_bug.cgi?id=2567333
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.51%
Raw Score 0.005130
Percentile 44.3%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00513
2026-11-13
0.00513
2026-11-12
0.00513
2026-11-10
0.00513
2026-11-09
0.00513
2026-11-08
0.00513
2026-11-07
0.00513
2026-11-06
0.00513

Intelligence Sources

mitre ref →
nvd ref →

External Links