The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gcc | Oct 1, 2024 | Sep 2, 2019 |
| Centos_linux | — | Upgrade libgomp-debuginfoUpgrade libubsan-debuginfoUpgrade libgfortran-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libitm-debuginfoUpgrade libatomic-staticUpgrade libtsanUpgrade cpp-debuginfoUpgrade libstdc++-debuginfoUpgrade libgccUpgrade gcc-gdb-plugin-debuginfoUpgrade libquadmath-develUpgrade libubsanUpgrade libquadmathUpgrade libstdc++Upgrade libstdc++-docsUpgrade libquadmath-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libatomicUpgrade libitm-develUpgrade libgomp-offload-nvptxUpgrade libgompUpgrade gcc-c++Upgrade libgfortranUpgrade gcc-debugsourceUpgrade gcc-offload-nvptxUpgrade gccUpgrade libasan-debuginfoUpgrade gcc-gfortranUpgrade cppUpgrade libasanUpgrade libgcc-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade gcc-debuginfoUpgrade libstdc++-develUpgrade libitmUpgrade liblsan-debuginfoUpgrade gcc-c++-debuginfoUpgrade gcc-gdb-pluginUpgrade libtsan-debuginfoUpgrade libatomic-debuginfoUpgrade liblsanUpgrade libgomp-offload-nvptx-debuginfo | Apr 29, 2020 | Sep 2, 2019 |
| Debian | — | Upgrade gcc-9 | Jul 30, 2024 | Sep 2, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/gcc. | Sep 25, 2024 | Sep 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libatomic-staticUpgrade libatomicUpgrade libgccUpgrade libstdc++Upgrade libobjcUpgrade gcc-c++Upgrade libgfortranUpgrade libstdc++-develUpgrade gccUpgrade libitmUpgrade gcc-objcUpgrade cppUpgrade libasanUpgrade gcc-gfortranUpgrade gcc-objc++Upgrade libgompUpgrade libitm-devel | Sep 30, 2019 | Sep 2, 2019 |
| Oracle_linux | — | Upgrade libatomicUpgrade cppUpgrade gcc-c++Upgrade libgccUpgrade gcc-gfortranUpgrade libgo-develUpgrade libgo-staticUpgrade libitmUpgrade gcc-gdb-pluginUpgrade libitm-staticUpgrade libstdc++-staticUpgrade libstdc++Upgrade libquadmath-staticUpgrade libgompUpgrade libstdc++-develUpgrade gcc-objc++Upgrade libatomic-staticUpgrade gcc-plugin-develUpgrade libobjcUpgrade libstdc++-docsUpgrade libquadmathUpgrade libtsan-staticUpgrade libasan-staticUpgrade gcc | Oct 5, 2022 | Sep 2, 2019 |
| Redhat_linux | — | Upgrade libgomp-debuginfoUpgrade libtsanUpgrade libstdc++Upgrade libubsanUpgrade gcc-plugin-develUpgrade libquadmathUpgrade gcc-plugin-devel-debuginfoUpgrade libstdc++-debuginfoUpgrade libasan-debuginfoUpgrade libstdc++-docsUpgrade gcc-gdb-plugin-debuginfoUpgrade libubsan-debuginfoUpgrade libquadmath-debuginfoUpgrade cpp-debuginfoUpgrade libgccUpgrade libitm-debuginfoUpgrade libquadmath-develUpgrade libgfortran-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libatomic-staticUpgrade gcc-offload-nvptxUpgrade libatomic-debuginfoUpgrade cppUpgrade libstdc++-develUpgrade gcc-gfortran-debuginfoUpgrade gcc-gfortranUpgrade libtsan-debuginfoUpgrade libasanUpgrade libgompUpgrade liblsan-debuginfoUpgrade gcc-debugsourceUpgrade libgomp-offload-nvptxUpgrade libgfortranUpgrade gcc-c++Upgrade libstdc++-staticUpgrade gcc-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade gccUpgrade libitm-develUpgrade libatomicUpgrade libitmUpgrade gcc-gdb-pluginUpgrade libgcc-debuginfoUpgrade liblsanUpgrade gcc-c++-debuginfo | Apr 29, 2020 | Sep 2, 2019 |
| Suse | — | Upgrade libada9-32bitUpgrade libobjc4Upgrade libtsan0Upgrade libasan5-32bitUpgrade libubsan1Upgrade libstdc++6-pp-gcc9-32bitUpgrade libitm1-32bitUpgrade cross-nvptx-newlib7-develUpgrade gcc9Upgrade gcc7-objc-32bitUpgrade libgfortran5-32bitUpgrade libgomp1Upgrade libstdc++6-32bitUpgrade gcc9-c++Upgrade libada7-32bitUpgrade libstdc++6-devel-gcc9-32bitUpgrade libubsan0-32bitUpgrade libasan4-32bitUpgrade liblsan0Upgrade gcc9-ada-32bitUpgrade gcc9-32bitUpgrade libgfortran5Upgrade libgo11-32bitUpgrade libgo14Upgrade gcc9-localeUpgrade cross-nvptx-gcc7Upgrade cpp9Upgrade libgomp1-32bitUpgrade gcc7-obj-c++Upgrade libcilkrts5-32bitUpgrade gcc7-c++-32bitUpgrade gcc9-adaUpgrade libgo11Upgrade libada9Upgrade libgfortran4Upgrade libada7Upgrade gcc9-fortran-32bitUpgrade gcc7Upgrade libstdc++6-devel-gcc7Upgrade gcc7-fortran-32bitUpgrade libgfortran4-32bitUpgrade gcc9-goUpgrade libatomic1-32bitUpgrade gcc7-adaUpgrade libatomic1Upgrade libasan5Upgrade libstdc++6Upgrade gcc7-32bitUpgrade libstdc++6-devel-gcc9Upgrade libstdc++6-localeUpgrade libitm1Upgrade libubsan0Upgrade libstdc++6-pp-gcc9Upgrade cross-nvptx-newlib9-develUpgrade gcc7-fortranUpgrade libquadmath0Upgrade gcc7-obj-c++-32bitUpgrade libgo14-32bitUpgrade gcc9-go-32bitUpgrade libcilkrts5Upgrade gcc7-ada-32bitUpgrade gcc7-c++Upgrade gcc9-infoUpgrade libubsan1-32bitUpgrade libgcc_s1Upgrade gcc7-infoUpgrade gcc7-localeUpgrade gcc7-objcUpgrade libasan4Upgrade gcc7-go-32bitUpgrade libquadmath0-32bitUpgrade cross-nvptx-gcc9Upgrade gcc9-fortranUpgrade gcc9-c++-32bitUpgrade cpp7Upgrade libstdc++6-devel-gcc7-32bitUpgrade libgcc_s1-32bitUpgrade libobjc4-32bitUpgrade gcc7-go | Oct 24, 2019 | Sep 2, 2019 |
| Ubuntu | — | Upgrade gcc-10Upgrade gcc-8Upgrade gcc-7 | Nov 19, 2024 | Sep 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub