The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gcc | Sep 20, 2017 | Nov 17, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gcc-goUpgrade libgfortranUpgrade libatomic-staticUpgrade gcc-gfortranUpgrade libgnat-develUpgrade libstdc++-develUpgrade libgccUpgrade gcc-gnatUpgrade libquadmathUpgrade libstdc++-docsUpgrade libobjcUpgrade libgoUpgrade libasanUpgrade libgompUpgrade gcc-c++Upgrade libquadmath-develUpgrade cppUpgrade libgo-develUpgrade libatomicUpgrade gcc-objc++Upgrade libitm-develUpgrade gcc-objcUpgrade gccUpgrade libstdc++Upgrade libitmUpgrade libgnat | Apr 16, 2020 | Nov 17, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 20, 2015 |
| Suse | — | Upgrade libobjc4-32bitUpgrade gcc48-fortran-32bitUpgrade gcc5-ada-32bitUpgrade mozilla-nss-32bitUpgrade gcc48-adaUpgrade libfreebl3Upgrade gcc5-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade gcc5-infoUpgrade mozilla-nss-toolsUpgrade libada5-32bitUpgrade libgfortran3Upgrade gcc48-fortranUpgrade gcc48-infoUpgrade libasan0-32bitUpgrade libtsan0Upgrade libasan2Upgrade libffi-devel-gcc5-32bitUpgrade libgcj_bc1Upgrade gcc48-gij-32bitUpgrade mozilla-nssUpgrade gcc48-localeUpgrade gcc5-adaUpgrade mozilla-nss-x86Upgrade libasan2-32bitUpgrade sles12sp1-docker-imageUpgrade libmpx0Upgrade gcc48-gijUpgrade libgomp1Upgrade gcc5-fortranUpgrade libgomp1-32bitUpgrade libfreebl3-x86Upgrade libffi-devel-gcc5Upgrade gcc5-c++Upgrade libgcj48-develUpgrade libstdc++6-devel-gcc5-32bitUpgrade libstdc++6-localeUpgrade sles12-docker-imageUpgrade libatomic1Upgrade libgcj48-32bitUpgrade libgfortran3-32bitUpgrade gcc48-objcUpgrade gcc48-32bitUpgrade mozilla-nss-develUpgrade libstdc++48-develUpgrade libitm1-32bitUpgrade gcc48-obj-c++Upgrade libada5Upgrade libsoftokn3-32bitUpgrade liblsan0Upgrade gcc5-localeUpgrade libmpx0-32bitUpgrade libffi4Upgrade libstdc++6-32bitUpgrade libasan0Upgrade libobjc4Upgrade libquadmath0Upgrade gcc48-objc-32bitUpgrade libmpxwrappers0-32bitUpgrade libsoftokn3Upgrade libgcj48Upgrade firefox-libstdc++6Upgrade libcilkrts5Upgrade gcc48Upgrade libgcj48-jarUpgrade libstdc++6Upgrade gcc48-c++Upgrade MozillaFirefox-translationsUpgrade cpp5Upgrade libgcc_s1-32bitUpgrade libffi48-develUpgrade libfreebl3-32bitUpgrade libatomic1-32bitUpgrade libubsan0-32bitUpgrade firefox-libffi4Upgrade libquadmath0-32bitUpgrade gcc5-fortran-32bitUpgrade libitm1Upgrade gcc5Upgrade libffi4-32bitUpgrade MozillaFirefoxUpgrade libgcc_s1Upgrade libmpxwrappers0Upgrade cpp48Upgrade MozillaFirefox-develUpgrade libstdc++48-devel-32bitUpgrade libada48Upgrade libstdc++6-devel-gcc5Upgrade libcilkrts5-32bitUpgrade gcc5-c++-32bitUpgrade gcc48-javaUpgrade libsoftokn3-x86Upgrade libubsan0 | Dec 18, 2015 | Nov 17, 2015 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub