The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gcc | Oct 1, 2024 | Sep 2, 2019 |
| Centos_linux | — | Upgrade gcc-gfortran-debuginfoUpgrade gcc-debuginfoUpgrade libasanUpgrade liblsan-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade libtsan-debuginfoUpgrade gcc-debugsourceUpgrade libitm-develUpgrade gcc-c++-debuginfoUpgrade liblsanUpgrade libgfortranUpgrade gccUpgrade libgompUpgrade libgcc-debuginfoUpgrade gcc-gfortranUpgrade libatomic-debuginfoUpgrade gcc-c++Upgrade cppUpgrade gcc-offload-nvptxUpgrade gcc-gdb-pluginUpgrade libstdc++-develUpgrade libasan-debuginfoUpgrade libitmUpgrade libgomp-offload-nvptxUpgrade libubsan-debuginfoUpgrade libstdc++-debuginfoUpgrade libstdc++-docsUpgrade libitm-debuginfoUpgrade libatomic-staticUpgrade libquadmath-debuginfoUpgrade cpp-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libubsanUpgrade libgfortran-debuginfoUpgrade libquadmath-develUpgrade libstdc++Upgrade libtsanUpgrade libatomicUpgrade gcc-offload-nvptx-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade libgomp-debuginfoUpgrade libgccUpgrade libquadmath | Apr 29, 2020 | Sep 2, 2019 |
| Debian | — | Upgrade gcc-9 | Jul 30, 2024 | Sep 2, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/gcc. | Sep 25, 2024 | Sep 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libitm-develUpgrade gcc-c++Upgrade gcc-objcUpgrade cppUpgrade libasanUpgrade libitmUpgrade libgfortranUpgrade gcc-gfortranUpgrade libstdc++-develUpgrade gcc-objc++Upgrade libgompUpgrade gccUpgrade libobjcUpgrade libatomic-staticUpgrade libatomicUpgrade libgccUpgrade libstdc++ | Sep 30, 2019 | Sep 2, 2019 |
| Oracle_linux | — | Upgrade libasan-staticUpgrade gcc-plugin-develUpgrade libtsan-staticUpgrade libobjcUpgrade gccUpgrade libatomic-staticUpgrade libquadmathUpgrade gcc-objc++Upgrade libstdc++-docsUpgrade libgompUpgrade libgo-develUpgrade libatomicUpgrade libstdc++Upgrade libstdc++-develUpgrade libgo-staticUpgrade libitm-staticUpgrade gcc-gfortranUpgrade libgccUpgrade libitmUpgrade libstdc++-staticUpgrade gcc-c++Upgrade libquadmath-staticUpgrade gcc-gdb-pluginUpgrade cpp | Oct 5, 2022 | Sep 2, 2019 |
| Redhat_linux | — | Upgrade gcc-offload-nvptxUpgrade libgompUpgrade cppUpgrade libstdc++-staticUpgrade libasanUpgrade libgfortranUpgrade libatomicUpgrade gcc-debugsourceUpgrade libatomic-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade libgomp-offload-nvptxUpgrade gcc-c++-debuginfoUpgrade libgcc-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade libitmUpgrade gcc-debuginfoUpgrade liblsan-debuginfoUpgrade gcc-gdb-pluginUpgrade gcc-gfortranUpgrade liblsanUpgrade gccUpgrade gcc-c++Upgrade libstdc++-develUpgrade libitm-develUpgrade libtsan-debuginfoUpgrade libatomic-staticUpgrade libstdc++-debuginfoUpgrade libstdc++-docsUpgrade libgccUpgrade libstdc++Upgrade libquadmath-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libubsanUpgrade libquadmath-develUpgrade libitm-debuginfoUpgrade libubsan-debuginfoUpgrade libgomp-debuginfoUpgrade gcc-plugin-develUpgrade cpp-debuginfoUpgrade libasan-debuginfoUpgrade libgfortran-debuginfoUpgrade libtsanUpgrade gcc-offload-nvptx-debuginfoUpgrade libquadmath | Apr 29, 2020 | Sep 2, 2019 |
| Suse | — | Upgrade libubsan1-32bitUpgrade gcc7-localeUpgrade libgcc_s1Upgrade gcc7-32bitUpgrade gcc9-go-32bitUpgrade gcc7-infoUpgrade gcc7-ada-32bitUpgrade gcc7-obj-c++-32bitUpgrade libgo14-32bitUpgrade libstdc++6Upgrade libstdc++6-localeUpgrade gcc9-infoUpgrade gcc9-goUpgrade libstdc++6-devel-gcc7Upgrade libcilkrts5Upgrade gcc7-fortranUpgrade libstdc++6-pp-gcc9Upgrade gcc7-goUpgrade libobjc4-32bitUpgrade cross-nvptx-gcc9Upgrade libgcc_s1-32bitUpgrade libasan4Upgrade gcc7-go-32bitUpgrade gcc9-fortranUpgrade gcc9-fortran-32bitUpgrade cross-nvptx-newlib9-develUpgrade libubsan0Upgrade libitm1Upgrade libquadmath0Upgrade libstdc++6-devel-gcc7-32bitUpgrade libquadmath0-32bitUpgrade gcc7-adaUpgrade gcc9-c++-32bitUpgrade gcc7-fortran-32bitUpgrade gcc7Upgrade libstdc++6-devel-gcc9Upgrade libatomic1Upgrade gcc7-objcUpgrade libatomic1-32bitUpgrade gcc7-c++Upgrade libasan5Upgrade libgfortran4-32bitUpgrade cpp7Upgrade libstdc++6-devel-gcc9-32bitUpgrade libasan5-32bitUpgrade gcc9-32bitUpgrade liblsan0Upgrade libada9Upgrade libgo14Upgrade libgo11-32bitUpgrade cross-nvptx-gcc7Upgrade gcc7-obj-c++Upgrade libgo11Upgrade cpp9Upgrade gcc9-adaUpgrade gcc7-objc-32bitUpgrade libobjc4Upgrade libtsan0Upgrade libgfortran4Upgrade gcc9Upgrade libada7-32bitUpgrade libubsan1Upgrade libstdc++6-pp-gcc9-32bitUpgrade gcc9-c++Upgrade cross-nvptx-newlib7-develUpgrade libgomp1Upgrade libubsan0-32bitUpgrade libgomp1-32bitUpgrade gcc7-c++-32bitUpgrade libada9-32bitUpgrade libgfortran5Upgrade libitm1-32bitUpgrade libasan4-32bitUpgrade libstdc++6-32bitUpgrade gcc9-ada-32bitUpgrade libada7Upgrade libgfortran5-32bitUpgrade gcc9-localeUpgrade libcilkrts5-32bit | Oct 24, 2019 | Sep 2, 2019 |
| Ubuntu | — | Upgrade gcc-10Upgrade gcc-7Upgrade gcc-8 | Nov 19, 2024 | Sep 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub