Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 7, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2018 |
| Suse | — | Upgrade gcc48Upgrade gcc48-fortranUpgrade libgcc_s1Upgrade libobjc4-32bitUpgrade gcc48-objc-32bitUpgrade libtsan0Upgrade gcc48-gijUpgrade libstdc++48-devel-32bitUpgrade gcc48-localeUpgrade libasan0Upgrade libgcc_s1-x86Upgrade libgcc_s1-32bitUpgrade libstdc++48-develUpgrade libada48Upgrade libffi48-develUpgrade libasan0-32bitUpgrade libgcj48-develUpgrade libgcj48Upgrade libquadmath0-32bitUpgrade gcc48-gij-32bitUpgrade libgcj48-jarUpgrade gcc48-fortran-32bitUpgrade libitm1-32bitUpgrade gcc48-infoUpgrade libstdc++6Upgrade libgfortran3-32bitUpgrade gcc48-32bitUpgrade libgomp1-32bitUpgrade libatomic1-32bitUpgrade libgcj_bc1Upgrade gcc48-obj-c++Upgrade gcc48-adaUpgrade gcc48-objcUpgrade libstdc++6-x86Upgrade libquadmath0Upgrade libgomp1Upgrade libffi4Upgrade libobjc4Upgrade cpp48Upgrade libffi4-32bitUpgrade gcc48-javaUpgrade libgcj48-32bitUpgrade gcc48-c++Upgrade libstdc++6-32bitUpgrade libitm1Upgrade libgfortran3Upgrade libatomic1 | Dec 9, 2016 | Dec 9, 2016 |
| Ubuntu | — | Upgrade gcc-4.8-armhf-crossUpgrade gcc-4.8-arm64-crossUpgrade gcc-4.9Upgrade gcc-4.8 | Nov 19, 2024 | Mar 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub