The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_73425 advisory.

    * gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:73426 advisory.

    * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:73425 advisory.

    * gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1082 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-13732:
    A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in     gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-     destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main     function list while the list length counter is decremented, resulting in an out-of-bounds write when the     function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious     .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and     performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need     to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary     commands within the GDB process.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142302 advisory.

    A flaw was found in GDB's STABS debug format parser. The     read_member_functions() function in gdb/stabsread.c contains a linked     list removal bug in the code that separates destructor and non-destructor     member functions of C++ classes. The bug causes the destructor entries to     remain in the main function list while the list length counter is     decremented, resulting in an out-of-bounds write when the function list     is copied to its final allocated array. An attacker can craft an ELF     binary with malicious .stab and .stabstr sections that triggers this     out-of-bounds write when a user opens the file in GDB and performs any     symbol-inspection operation such as setting a breakpoint. The inferior     process does not need to be executed. Under controlled conditions, this     was demonstrated to achieve execution of arbitrary commands within the     GDB process.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1735 advisory.

    This advisory aggregates security fixes for the gdb SRPM in CIQ LTS 9.6. It addresses 5 CVEs:
    CVE-2022-48064, CVE-2026-13732, CVE-2006-4146, CVE-2022-4806, CVE-2022-48065.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73425 advisory.

    The GNU Debugger (GDB) allows debugging programs written in C, C++, Java, and     other languages by executing them in a controlled fashion and then printing     their data.

    Security Fix(es):

    * gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gdb installed on the remote host is prior to 8.0.1-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3958 advisory.

    A flaw was found in GDB's STABS debug format parser. Theread_member_functions() function in     gdb/stabsread.c contains a linkedlist removal bug in the code that separates destructor and non-     destructormember functions of C++ classes. The bug causes the destructor entries toremain in the main     function list while the list length counter isdecremented, resulting in an out-of-bounds write when the     function listis copied to its final allocated array. An attacker can craft an ELFbinary with malicious     .stab and .stabstr sections that triggers thisout-of-bounds write when a user opens the file in GDB and     performs anysymbol-inspection operation such as setting a breakpoint. The inferiorprocess does not need to     be executed. Under controlled conditions, thiswas demonstrated to achieve execution of arbitrary commands     within theGDB process. (CVE-2026-13732)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73427 advisory.

    The GNU Debugger (GDB) allows debugging of programs written in C, C++, and     other languages by executing them in a controlled fashion and printing their     data.

    Security Fix(es):

    * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791547259 advisory.

  - A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in     gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-     destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main     function list while the list length counter is decremented, resulting in an out-of-bounds write when the     function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious     .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and     performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need     to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary     commands within the GDB process. (CVE-2026-13732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1081 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-13732:
    A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in     gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-     destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main     function list while the list length counter is decremented, resulting in an out-of-bounds write when the     function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious     .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and     performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need     to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary     commands within the GDB process.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130163 advisory.

    A flaw was found in GDB's STABS debug format parser. The     read_member_functions() function in gdb/stabsread.c contains a linked     list removal bug in the code that separates destructor and non-destructor     member functions of C++ classes. The bug causes the destructor entries to     remain in the main function list while the list length counter is     decremented, resulting in an out-of-bounds write when the function list     is copied to its final allocated array. An attacker can craft an ELF     binary with malicious .stab and .stabstr sections that triggers this     out-of-bounds write when a user opens the file in GDB and performs any     symbol-inspection operation such as setting a breakpoint. The inferior     process does not need to be executed. Under controlled conditions, this     was demonstrated to achieve execution of arbitrary commands within the     GDB process.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73426 advisory.

    The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java,     and other languages by executing them in a controlled fashion and then     printing out their data.

    Security Fix(es):

    * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1736 advisory.

    This advisory aggregates security fixes for the gdb SRPM in CIQ LTS 9.2. It addresses 2 CVEs:
    CVE-2026-13732, CVE-2006-4146.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
359535	Rocky Linux 8 [CIQ] Security Update: gdb / gdb-debuginfo / gdb-debugsource / gdb-doc / gdb-gdbserver / etc (crlsa-2026_73425)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
351445	RockyLinux 9 : gdb (RLSA-2026:73426)	Nessus	Rocky Linux Local Security Checks	2026/9/30	2026/9/30	high
362405	AlmaLinux 8 : gdb (ALSA-2026:73425)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
365159	TencentOS Server 4: crash (TSSA-2026:1082)	Nessus	Tencent Local Security Checks	2026/10/12	2026/10/12	high
370012	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdb (UTSA-2026-142302)	Nessus	Unity Linux Local Security Checks	2026/10/21	2026/10/21	high
374498	Rocky Linux 9.6 [CIQ] Security Update: gdb / gdb-doc / gdb-gdbserver / gdb-headless / gdb-minimal Multiple Vulnerabilities (ciqsa-2026_1735)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/10/31	medium
351143	RHEL 8 : gdb (RHSA-2026:73425)	Nessus	Red Hat Local Security Checks	2026/9/29	2026/9/29	high
351059	Amazon Linux 2 : gdb (ALAS-2026-3958)	Nessus	Amazon Linux Local Security Checks	2026/9/29	2026/9/30	high
351137	RHEL 10 : gdb (RHSA-2026:73427)	Nessus	Red Hat Local Security Checks	2026/9/29	2026/9/29	high
364498	AlmaLinux 9.2 [TuxCare] Security Update: gdb / gdb-doc / gdb-gdbserver / gdb-headless / gdb-minimal (ALMALINUX9.2:CLSA-2026:1791547259)	Nessus	Alma Linux Local Security Checks	2026/10/9	2026/10/9	high
365129	TencentOS Server 4: gdb (TSSA-2026:1081)	Nessus	Tencent Local Security Checks	2026/10/12	2026/10/12	high
366249	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gdb (UTSA-2026-130163)	Nessus	Unity Linux Local Security Checks	2026/10/15	2026/10/15	high
351213	RHEL 9 : gdb (RHSA-2026:73426)	Nessus	Red Hat Local Security Checks	2026/9/29	2026/9/29	high
374524	Rocky Linux 9.2 [CIQ] Security Update: gdb / gdb-doc / gdb-gdbserver / gdb-headless / gdb-minimal Multiple Vulnerabilities (ciqsa-2026_1736)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/10/31	high

检测

插件搜索

high

high

high

high

high

medium

high

high

high

high

high

high

high

high