The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gcc | Sep 20, 2017 | Nov 17, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libasanUpgrade libobjcUpgrade libitmUpgrade libstdc++Upgrade libgnatUpgrade gccUpgrade gcc-objcUpgrade libgoUpgrade libgo-develUpgrade libstdc++-docsUpgrade libquadmath-develUpgrade libitm-develUpgrade libgompUpgrade gcc-c++Upgrade cppUpgrade gcc-objc++Upgrade libquadmathUpgrade libatomicUpgrade libgnat-develUpgrade gcc-gnatUpgrade libgfortranUpgrade libgccUpgrade gcc-goUpgrade libstdc++-develUpgrade gcc-gfortranUpgrade libatomic-static | Apr 16, 2020 | Nov 17, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 20, 2015 |
| Suse | — | Upgrade libmpxwrappers0Upgrade gcc48-javaUpgrade libsoftokn3-32bitUpgrade libgcj48-jarUpgrade libubsan0Upgrade libobjc4Upgrade cpp5Upgrade libsoftokn3Upgrade libquadmath0-32bitUpgrade libsoftokn3-x86Upgrade libquadmath0Upgrade firefox-libffi4Upgrade libffi4Upgrade MozillaFirefox-develUpgrade gcc5-localeUpgrade libatomic1-32bitUpgrade libmpx0-32bitUpgrade gcc5-c++-32bitUpgrade libgcc_s1-32bitUpgrade libffi48-develUpgrade gcc48-c++Upgrade libstdc++6-32bitUpgrade libgcj48Upgrade libstdc++6Upgrade gcc5Upgrade libasan0Upgrade gcc5-fortran-32bitUpgrade firefox-libstdc++6Upgrade cpp48Upgrade gcc48-objc-32bitUpgrade MozillaFirefoxUpgrade libgcc_s1Upgrade libada48Upgrade libffi4-32bitUpgrade libada5Upgrade libitm1-32bitUpgrade libfreebl3-32bitUpgrade gcc48-obj-c++Upgrade libmpxwrappers0-32bitUpgrade libstdc++6-devel-gcc5Upgrade liblsan0Upgrade gcc48Upgrade MozillaFirefox-translationsUpgrade libubsan0-32bitUpgrade libcilkrts5Upgrade libcilkrts5-32bitUpgrade libitm1Upgrade libstdc++48-develUpgrade libstdc++48-devel-32bitUpgrade libatomic1Upgrade libgomp1Upgrade gcc48-localeUpgrade MozillaFirefox-branding-SLEDUpgrade gcc48-fortranUpgrade libgomp1-32bitUpgrade mozilla-nss-x86Upgrade gcc5-adaUpgrade libgcj_bc1Upgrade mozilla-nssUpgrade gcc5-fortranUpgrade libasan2-32bitUpgrade libffi-devel-gcc5Upgrade gcc5-32bitUpgrade libfreebl3Upgrade libstdc++6-devel-gcc5-32bitUpgrade libgcj48-develUpgrade libstdc++6-localeUpgrade gcc48-objcUpgrade libmpx0Upgrade libasan2Upgrade gcc48-infoUpgrade libgfortran3Upgrade libada5-32bitUpgrade gcc48-32bitUpgrade libgfortran3-32bitUpgrade mozilla-nss-32bitUpgrade libtsan0Upgrade gcc48-gij-32bitUpgrade gcc48-adaUpgrade libobjc4-32bitUpgrade gcc5-ada-32bitUpgrade libasan0-32bitUpgrade gcc5-c++Upgrade libfreebl3-x86Upgrade libgcj48-32bitUpgrade sles12-docker-imageUpgrade mozilla-nss-toolsUpgrade libffi-devel-gcc5-32bitUpgrade mozilla-nss-develUpgrade sles12sp1-docker-imageUpgrade gcc48-fortran-32bitUpgrade gcc5-infoUpgrade gcc48-gij | Dec 18, 2015 | Nov 17, 2015 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 17, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub