Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
CVSS Details
- CVSS 3.0 Base Score: 4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gcc-c++Upgrade libmudflap-staticUpgrade libmudflapUpgrade libstdc++-develUpgrade libmudflap-develUpgrade libgnatUpgrade libquadmathUpgrade gcc-objc++Upgrade gcc-debuginfoUpgrade libobjcUpgrade cppUpgrade libasanUpgrade libatomicUpgrade libtsan-staticUpgrade libgfortranUpgrade libstdc++-staticUpgrade libgo-develUpgrade libgfortran-staticUpgrade libquadmath-staticUpgrade libgompUpgrade libatomic-staticUpgrade gcc-plugin-develUpgrade gcc-gfortranUpgrade libitm-staticUpgrade libgo-staticUpgrade libquadmath-develUpgrade libtsanUpgrade gcc-goUpgrade gccUpgrade libasan-staticUpgrade libitm-develUpgrade libgccUpgrade libgnat-staticUpgrade libgnat-develUpgrade libitmUpgrade libstdc++Upgrade gcc-gnatUpgrade libstdc++-docsUpgrade libgoUpgrade gcc-base-debuginfo | Aug 28, 2019 | Jul 26, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libatomicUpgrade libgo-develUpgrade gccUpgrade libgoUpgrade libitm-develUpgrade libitmUpgrade gcc-gnatUpgrade libstdc++-develUpgrade libstdc++-docsUpgrade gcc-gfortranUpgrade libgompUpgrade cppUpgrade libstdc++Upgrade gcc-c++Upgrade libgccUpgrade gcc-goUpgrade gcc-objcUpgrade libquadmath-develUpgrade libgnat-develUpgrade gcc-objc++Upgrade libatomic-staticUpgrade libquadmathUpgrade libgnatUpgrade libgfortranUpgrade libobjc | May 3, 2018 | Jul 26, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libitmUpgrade libobjcUpgrade libquadmathUpgrade gccUpgrade libgccUpgrade gcc-goUpgrade libgfortranUpgrade libitm-develUpgrade libstdc++-develUpgrade libgoUpgrade gcc-gnatUpgrade libgnat-develUpgrade libatomic-staticUpgrade libquadmath-develUpgrade libgnatUpgrade gcc-objcUpgrade libstdc++-docsUpgrade gcc-objc++Upgrade gcc-c++Upgrade libgo-develUpgrade libstdc++Upgrade libatomicUpgrade libgompUpgrade cppUpgrade gcc-gfortran | Jul 3, 2018 | Jul 26, 2017 |
| Oracle_linux | — | Upgrade gcc-gnatUpgrade gcc-gfortranUpgrade gcc-goUpgrade libgnat-staticUpgrade libtsanUpgrade libstdc++-staticUpgrade libgfortranUpgrade libgnat-develUpgrade libatomicUpgrade libgompUpgrade libstdc++Upgrade libitm-staticUpgrade libgccUpgrade libitmUpgrade gcc-c++Upgrade libgfortran-staticUpgrade libgo-staticUpgrade gcc-objc++Upgrade libasan-staticUpgrade libobjcUpgrade libstdc++-docsUpgrade libstdc++-develUpgrade libquadmath-staticUpgrade libquadmathUpgrade libgoUpgrade libmudflap-staticUpgrade gcc-objcUpgrade cppUpgrade libgo-develUpgrade libatomic-staticUpgrade gcc-plugin-develUpgrade libmudflapUpgrade gccUpgrade libmudflap-develUpgrade libgnatUpgrade libasanUpgrade libitm-develUpgrade libquadmath-devel | Apr 19, 2018 | Mar 25, 2017 |
| Redhat_linux | — | Upgrade libgfortran-staticUpgrade gcc-debuginfoUpgrade libstdc++Upgrade libgoUpgrade libitm-develUpgrade libquadmathUpgrade libgompUpgrade libmudflap-staticUpgrade gccUpgrade libstdc++-develUpgrade libgccUpgrade libstdc++-docsUpgrade gcc-goUpgrade libmudflap-develUpgrade libgnat-develUpgrade libmudflapUpgrade libobjcUpgrade libitmUpgrade libatomic-staticUpgrade libasan-staticUpgrade libgnatUpgrade gcc-c++Upgrade libitm-staticUpgrade libquadmath-staticUpgrade gcc-objc++Upgrade cppUpgrade gcc-gnatUpgrade libatomicUpgrade libgo-staticUpgrade libgfortranUpgrade libquadmath-develUpgrade libgnat-staticUpgrade libtsan-staticUpgrade libstdc++-staticUpgrade gcc-plugin-develUpgrade libgo-develUpgrade gcc-gfortranUpgrade libtsanUpgrade libasanUpgrade gcc-base-debuginfo | Apr 11, 2018 | Jul 26, 2017 |
| Suse | — | Upgrade libgcj48-jarUpgrade gcc48Upgrade gcc48-c++Upgrade cpp48Upgrade gcc48-32bitUpgrade gcc48-obj-c++Upgrade gcc48-adaUpgrade libada48Upgrade libffi48-develUpgrade libgcj48Upgrade gcc48-objcUpgrade libobjc4Upgrade libstdc++48-devel-32bitUpgrade libasan0Upgrade libobjc4-32bitUpgrade libstdc++48-develUpgrade gcc48-localeUpgrade gcc48-fortranUpgrade gcc48-javaUpgrade gcc48-objc-32bitUpgrade gcc48-fortran-32bitUpgrade libgcj_bc1Upgrade libasan0-32bitUpgrade gcc48-gijUpgrade gcc48-gij-32bitUpgrade libgcj48-develUpgrade gcc48-infoUpgrade libgcj48-32bit | Sep 6, 2017 | Jul 26, 2017 |
| Ubuntu | — | Upgrade g++-5 (Ubuntu Pro)Upgrade gfortran-5 (Ubuntu Pro)Upgrade gnat-5 (Ubuntu Pro)Upgrade gcj-5 (Ubuntu Pro)Upgrade gccgo-6 (Ubuntu Pro)Upgrade gcc-5 (Ubuntu Pro)Upgrade gccgo-5 (Ubuntu Pro)Upgrade gdc-5 (Ubuntu Pro)Upgrade gcj-5-jdk (Ubuntu Pro)Upgrade gcj-5-jre-headless (Ubuntu Pro) | Dec 9, 2022 | Jul 26, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub