The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gcc | Sep 20, 2017 | Nov 17, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libitmUpgrade libgoUpgrade libobjcUpgrade libstdc++-docsUpgrade libstdc++Upgrade gcc-objcUpgrade cppUpgrade libgnatUpgrade gccUpgrade libitm-develUpgrade libasanUpgrade libquadmathUpgrade libquadmath-develUpgrade gcc-objc++Upgrade libgompUpgrade gcc-c++Upgrade libgo-develUpgrade libatomicUpgrade gcc-gfortranUpgrade libgfortranUpgrade libatomic-staticUpgrade libgnat-develUpgrade gcc-gnatUpgrade libgccUpgrade gcc-goUpgrade libstdc++-devel | Apr 16, 2020 | Nov 17, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 20, 2015 |
| Suse | — | Upgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade gcc5-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libtsan0Upgrade gcc5-adaUpgrade gcc48-localeUpgrade sles12sp1-docker-imageUpgrade libgcj48-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade libada5-32bitUpgrade libasan2-32bitUpgrade mozilla-nss-x86Upgrade gcc5-fortranUpgrade gcc48-infoUpgrade libgfortran3Upgrade gcc48-32bitUpgrade libgomp1-32bitUpgrade libffi-devel-gcc5Upgrade libgfortran3-32bitUpgrade libasan2Upgrade libmpx0Upgrade libfreebl3-x86Upgrade gcc48-gijUpgrade gcc5-c++Upgrade libstdc++6-devel-gcc5-32bitUpgrade gcc5-ada-32bitUpgrade gcc48-fortran-32bitUpgrade libasan0-32bitUpgrade mozilla-nssUpgrade libstdc++6-localeUpgrade libgcj_bc1Upgrade libffi-devel-gcc5-32bitUpgrade gcc48-gij-32bitUpgrade libgcj48-develUpgrade sles12-docker-imageUpgrade gcc48-adaUpgrade gcc48-objcUpgrade libobjc4-32bitUpgrade libgomp1Upgrade libatomic1Upgrade gcc48-fortranUpgrade gcc5-infoUpgrade libubsan0-32bitUpgrade libitm1-32bitUpgrade libada48Upgrade libquadmath0Upgrade gcc48Upgrade libstdc++6-devel-gcc5Upgrade libcilkrts5-32bitUpgrade libstdc++48-develUpgrade gcc48-objc-32bitUpgrade cpp48Upgrade gcc5-fortran-32bitUpgrade libsoftokn3-x86Upgrade gcc48-c++Upgrade liblsan0Upgrade MozillaFirefox-develUpgrade firefox-libffi4Upgrade gcc5Upgrade libitm1Upgrade libatomic1-32bitUpgrade libmpxwrappers0-32bitUpgrade libffi4Upgrade libfreebl3-32bitUpgrade libsoftokn3Upgrade gcc48-javaUpgrade libobjc4Upgrade libsoftokn3-32bitUpgrade libffi4-32bitUpgrade libstdc++48-devel-32bitUpgrade libquadmath0-32bitUpgrade libstdc++6-32bitUpgrade libmpx0-32bitUpgrade gcc5-localeUpgrade firefox-libstdc++6Upgrade gcc48-obj-c++Upgrade libada5Upgrade libgcj48Upgrade libubsan0Upgrade MozillaFirefoxUpgrade libgcc_s1Upgrade gcc5-c++-32bitUpgrade libmpxwrappers0Upgrade libffi48-develUpgrade libgcc_s1-32bitUpgrade libstdc++6Upgrade libgcj48-jarUpgrade MozillaFirefox-translationsUpgrade cpp5Upgrade libcilkrts5Upgrade libasan0 | Dec 18, 2015 | Nov 17, 2015 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 17, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub