Search for vulnerabilities
Vulnerability details: VCID-hy5d-c18e-aaaq
Vulnerability ID VCID-hy5d-c18e-aaaq
Aliases CVE-2006-4146
Summary Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
rhas Low https://access.redhat.com/errata/RHSA-2007:0229
rhas Low https://access.redhat.com/errata/RHSA-2007:0469
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.00458 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01231 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01258 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01258 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.01281 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
epss 0.02485 https://api.first.org/data/v1/epss?cve=CVE-2006-4146
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=203875
cvssv2 5.1 https://nvd.nist.gov/vuln/detail/CVE-2006-4146
Reference id Reference type URL
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
http://docs.info.apple.com/article.html?artnum=304669
http://lists.apple.com/archives/security-announce/2006/Oct/msg00000.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4146.json
https://api.first.org/data/v1/epss?cve=CVE-2006-4146
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4146
http://secunia.com/advisories/21713
http://secunia.com/advisories/22205
http://secunia.com/advisories/22662
http://secunia.com/advisories/25098
http://secunia.com/advisories/25632
http://secunia.com/advisories/25894
http://secunia.com/advisories/25934
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://security.gentoo.org/glsa/glsa-200711-23.xml
http://securitytracker.com/id?1017138
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10463
http://support.avaya.com/elmodocs2/security/ASA-2007-253.htm
http://www.osvdb.org/28318
http://www.redhat.com/support/errata/RHSA-2007-0229.html
http://www.redhat.com/support/errata/RHSA-2007-0469.html
http://www.securityfocus.com/bid/19802
http://www.ubuntu.com/usn/usn-356-1
http://www.vupen.com/english/advisories/2006/3433
http://www.vupen.com/english/advisories/2006/4283
http://www.vupen.com/english/advisories/2007/3229
203875 https://bugzilla.redhat.com/show_bug.cgi?id=203875
cpe:2.3:a:gnu:gdb:6.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gnu:gdb:6.5:*:*:*:*:*:*:*
CVE-2006-4146 https://nvd.nist.gov/vuln/detail/CVE-2006-4146
GLSA-200711-23 https://security.gentoo.org/glsa/200711-23
RHSA-2007:0229 https://access.redhat.com/errata/RHSA-2007:0229
RHSA-2007:0469 https://access.redhat.com/errata/RHSA-2007:0469
USN-356-1 https://usn.ubuntu.com/356-1/
No exploits are available.
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2006-4146
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.75815
EPSS Score 0.00458
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.