Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
CVSS Details
- CVSS 3.0 Base Score: 4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libatomic-staticUpgrade libitm-staticUpgrade libitmUpgrade libquadmath-develUpgrade gcc-base-debuginfoUpgrade gccUpgrade gcc-plugin-develUpgrade libasan-staticUpgrade libgo-staticUpgrade libgccUpgrade libstdc++Upgrade libitm-develUpgrade libgnat-staticUpgrade libstdc++-docsUpgrade gcc-goUpgrade libtsanUpgrade gcc-gnatUpgrade libgnat-develUpgrade libgoUpgrade gcc-gfortranUpgrade libgnatUpgrade gcc-debuginfoUpgrade libgo-develUpgrade gcc-objc++Upgrade libstdc++-staticUpgrade libgfortranUpgrade libatomicUpgrade libstdc++-develUpgrade libmudflap-develUpgrade cppUpgrade libquadmathUpgrade libgfortran-staticUpgrade libasanUpgrade libmudflapUpgrade libquadmath-staticUpgrade libgompUpgrade gcc-c++Upgrade libtsan-staticUpgrade libmudflap-staticUpgrade libobjc | Aug 28, 2019 | Jul 26, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libitmUpgrade gcc-c++Upgrade libstdc++-docsUpgrade libstdc++-develUpgrade gcc-gfortranUpgrade cppUpgrade gccUpgrade libitm-develUpgrade gcc-gnatUpgrade libstdc++Upgrade libgompUpgrade libgo-develUpgrade libgoUpgrade libatomicUpgrade libgccUpgrade gcc-goUpgrade gcc-objcUpgrade gcc-objc++Upgrade libgnatUpgrade libobjcUpgrade libquadmathUpgrade libquadmath-develUpgrade libgfortranUpgrade libatomic-staticUpgrade libgnat-devel | May 3, 2018 | Jul 26, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gcc-goUpgrade libatomic-staticUpgrade gcc-gnatUpgrade libgfortranUpgrade libgccUpgrade libgoUpgrade libstdc++-develUpgrade libobjcUpgrade libquadmathUpgrade libgnat-develUpgrade gccUpgrade libitmUpgrade libitm-develUpgrade libstdc++Upgrade libstdc++-docsUpgrade libatomicUpgrade cppUpgrade gcc-gfortranUpgrade gcc-objc++Upgrade gcc-c++Upgrade libgompUpgrade libgnatUpgrade libgo-develUpgrade gcc-objcUpgrade libquadmath-devel | Jul 3, 2018 | Jul 26, 2017 |
| Oracle_linux | — | Upgrade libquadmath-develUpgrade libstdc++-docsUpgrade gcc-objc++Upgrade libatomic-staticUpgrade libquadmath-staticUpgrade libgfortran-staticUpgrade libmudflap-develUpgrade libgoUpgrade gcc-c++Upgrade libasan-staticUpgrade libobjcUpgrade gccUpgrade libmudflap-staticUpgrade libquadmathUpgrade libasanUpgrade libmudflapUpgrade libgo-staticUpgrade libgo-develUpgrade cppUpgrade libstdc++-develUpgrade gcc-objcUpgrade gcc-plugin-develUpgrade libitm-develUpgrade libgnatUpgrade libgccUpgrade libitmUpgrade libstdc++Upgrade libgompUpgrade libstdc++-staticUpgrade libgnat-staticUpgrade libgfortranUpgrade gcc-gnatUpgrade libgnat-develUpgrade gcc-gfortranUpgrade gcc-goUpgrade libtsanUpgrade libatomicUpgrade libitm-static | Apr 19, 2018 | Mar 25, 2017 |
| Redhat_linux | — | Upgrade gccUpgrade libgccUpgrade gcc-debuginfoUpgrade libobjcUpgrade libitmUpgrade libasan-staticUpgrade gcc-goUpgrade libstdc++Upgrade libgoUpgrade libmudflap-staticUpgrade libitm-develUpgrade gcc-c++Upgrade libgompUpgrade libquadmathUpgrade libstdc++-develUpgrade libgnat-develUpgrade libgfortran-staticUpgrade libmudflapUpgrade libatomic-staticUpgrade libstdc++-docsUpgrade libgnatUpgrade libmudflap-develUpgrade cppUpgrade gcc-gnatUpgrade libquadmath-develUpgrade gcc-plugin-develUpgrade libstdc++-staticUpgrade libquadmath-staticUpgrade libasanUpgrade libtsan-staticUpgrade libgfortranUpgrade gcc-base-debuginfoUpgrade libgnat-staticUpgrade libatomicUpgrade libitm-staticUpgrade gcc-objc++Upgrade libgo-develUpgrade libgo-staticUpgrade libtsanUpgrade gcc-gfortran | Apr 11, 2018 | Jul 26, 2017 |
| Suse | — | Upgrade gcc48-32bitUpgrade gcc48-objcUpgrade libgcj48-jarUpgrade libobjc4Upgrade libgcj48Upgrade libstdc++48-devel-32bitUpgrade libffi48-develUpgrade gcc48Upgrade cpp48Upgrade gcc48-adaUpgrade gcc48-c++Upgrade gcc48-obj-c++Upgrade libasan0Upgrade libada48Upgrade gcc48-localeUpgrade gcc48-objc-32bitUpgrade gcc48-infoUpgrade gcc48-gij-32bitUpgrade libgcj48-32bitUpgrade gcc48-fortranUpgrade libgcj48-develUpgrade libasan0-32bitUpgrade gcc48-gijUpgrade libobjc4-32bitUpgrade gcc48-javaUpgrade gcc48-fortran-32bitUpgrade libstdc++48-develUpgrade libgcj_bc1 | Sep 6, 2017 | Jul 26, 2017 |
| Ubuntu | — | Upgrade gdc-5 (Ubuntu Pro)Upgrade gcc-5 (Ubuntu Pro)Upgrade gccgo-5 (Ubuntu Pro)Upgrade gcj-5-jre-headless (Ubuntu Pro)Upgrade gcj-5 (Ubuntu Pro)Upgrade gcj-5-jdk (Ubuntu Pro)Upgrade gccgo-6 (Ubuntu Pro)Upgrade gfortran-5 (Ubuntu Pro)Upgrade g++-5 (Ubuntu Pro)Upgrade gnat-5 (Ubuntu Pro) | Dec 9, 2022 | Jul 26, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub