CVE-2017-9778: GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section.

Security readout for executives and security teams

GDB can be forced to consume memory when it opens a malformed ELF binary or core file with a bad DWARF length. The direct business impact is disruption of debugging, incident response, or malware analysis workstations, not confirmed system compromise. Sources do not provide CVSS, CWE, active exploitation, or a named patch. Exposure is most likely on developer, reverse-engineering, incident response, and malware-analysis systems that use GDB 8.0 or earlier against untrusted ELF binaries or core files. Treat as a targeted operational resilience issue for teams handling untrusted binaries. Prioritize remediation where GDB supports incident response, malware analysis, crash triage, or automated binary-processing pipelines. Mitigation focus: Inventory GDB versions on developer and analysis systems.; Check GNU and operating-system package guidance for fixed GDB builds.; Avoid opening untrusted ELF or core files on unmanaged analyst workstations..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.