CVE-2011-4355: GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain file...

Security readout for executives and security teams

Older GNU GDB versions could trust files in the current directory when debugging. If a privileged user ran GDB in a directory controlled by a local attacker, crafted files could run script content and potentially raise privileges. Most relevant to developer workstations, build systems, and administration hosts that still run GDB before 7.5, especially where privileged users debug code from shared or untrusted directories. Treat as targeted hygiene for legacy development and operations environments. It is not marked as actively exploited, but privileged debugging workflows can turn a local issue into meaningful system compromise. Mitigation focus: Inventory installed GDB versions across developer, build, and administration systems.; Update GNU GDB to vendor-fixed packages or version 7.5 or later where applicable.; Avoid running GDB as root in directories writable by less-privileged users..

Prepared

Jun 15, 2026, 04:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.