The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-gcc | Oct 1, 2024 | Sep 2, 2019 | |
| Centos_linux | — | centos-upgrade-cppcentos-upgrade-cpp-debuginfocentos-upgrade-gcccentos-upgrade-gcc-ccentos-upgrade-gcc-c-debuginfocentos-upgrade-gcc-debuginfocentos-upgrade-gcc-debugsourcecentos-upgrade-gcc-gdb-plugincentos-upgrade-gcc-gdb-plugin-debuginfocentos-upgrade-gcc-gfortrancentos-upgrade-gcc-gfortran-debuginfocentos-upgrade-gcc-offload-nvptxcentos-upgrade-gcc-offload-nvptx-debuginfocentos-upgrade-gcc-plugin-devel-debuginfocentos-upgrade-libasancentos-upgrade-libasan-debuginfocentos-upgrade-libatomiccentos-upgrade-libatomic-debuginfocentos-upgrade-libatomic-staticcentos-upgrade-libgcccentos-upgrade-libgcc-debuginfocentos-upgrade-libgfortrancentos-upgrade-libgfortran-debuginfocentos-upgrade-libgompcentos-upgrade-libgomp-debuginfocentos-upgrade-libgomp-offload-nvptxcentos-upgrade-libgomp-offload-nvptx-debuginfocentos-upgrade-libitmcentos-upgrade-libitm-debuginfocentos-upgrade-libitm-develcentos-upgrade-liblsancentos-upgrade-liblsan-debuginfocentos-upgrade-libquadmathcentos-upgrade-libquadmath-debuginfocentos-upgrade-libquadmath-develcentos-upgrade-libstdccentos-upgrade-libstdc-debuginfocentos-upgrade-libstdc-develcentos-upgrade-libstdc-docscentos-upgrade-libtsancentos-upgrade-libtsan-debuginfocentos-upgrade-libubsancentos-upgrade-libubsan-debuginfo | Apr 29, 2020 | Sep 2, 2019 |
| Debian | debian-upgrade-gcc-9 | Jul 30, 2024 | Sep 2, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-gcc | Sep 25, 2024 | Sep 2, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-cpphuawei-euleros-2_0_sp8-upgrade-gcchuawei-euleros-2_0_sp8-upgrade-gcc-c++huawei-euleros-2_0_sp8-upgrade-gcc-gfortranhuawei-euleros-2_0_sp8-upgrade-gcc-objchuawei-euleros-2_0_sp8-upgrade-gcc-objc++huawei-euleros-2_0_sp8-upgrade-libasanhuawei-euleros-2_0_sp8-upgrade-libatomichuawei-euleros-2_0_sp8-upgrade-libatomic-statichuawei-euleros-2_0_sp8-upgrade-libgcchuawei-euleros-2_0_sp8-upgrade-libgfortranhuawei-euleros-2_0_sp8-upgrade-libgomphuawei-euleros-2_0_sp8-upgrade-libitmhuawei-euleros-2_0_sp8-upgrade-libitm-develhuawei-euleros-2_0_sp8-upgrade-libobjchuawei-euleros-2_0_sp8-upgrade-libstdc++huawei-euleros-2_0_sp8-upgrade-libstdc++-devel | Sep 30, 2019 | Sep 2, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-cpporacle-linux-upgrade-gccoracle-linux-upgrade-gcc-coracle-linux-upgrade-gcc-gdb-pluginoracle-linux-upgrade-gcc-gfortranoracle-linux-upgrade-gcc-offload-nvptxoracle-linux-upgrade-gcc-plugin-develoracle-linux-upgrade-libasanoracle-linux-upgrade-libatomicoracle-linux-upgrade-libatomic-staticoracle-linux-upgrade-libgccoracle-linux-upgrade-libgfortranoracle-linux-upgrade-libgomporacle-linux-upgrade-libgomp-offload-nvptxoracle-linux-upgrade-libitmoracle-linux-upgrade-libitm-develoracle-linux-upgrade-liblsanoracle-linux-upgrade-libquadmathoracle-linux-upgrade-libquadmath-develoracle-linux-upgrade-libstdcoracle-linux-upgrade-libstdc-develoracle-linux-upgrade-libstdc-docsoracle-linux-upgrade-libstdc-staticoracle-linux-upgrade-libtsanoracle-linux-upgrade-libubsan | Oct 5, 2022 | Sep 2, 2019 |
| Redhat_linux | redhat-upgrade-cppredhat-upgrade-cpp-debuginforedhat-upgrade-gccredhat-upgrade-gcc-credhat-upgrade-gcc-c-debuginforedhat-upgrade-gcc-debuginforedhat-upgrade-gcc-debugsourceredhat-upgrade-gcc-gdb-pluginredhat-upgrade-gcc-gdb-plugin-debuginforedhat-upgrade-gcc-gfortranredhat-upgrade-gcc-gfortran-debuginforedhat-upgrade-gcc-offload-nvptxredhat-upgrade-gcc-offload-nvptx-debuginforedhat-upgrade-gcc-plugin-develredhat-upgrade-gcc-plugin-devel-debuginforedhat-upgrade-libasanredhat-upgrade-libasan-debuginforedhat-upgrade-libatomicredhat-upgrade-libatomic-debuginforedhat-upgrade-libatomic-staticredhat-upgrade-libgccredhat-upgrade-libgcc-debuginforedhat-upgrade-libgfortranredhat-upgrade-libgfortran-debuginforedhat-upgrade-libgompredhat-upgrade-libgomp-debuginforedhat-upgrade-libgomp-offload-nvptxredhat-upgrade-libgomp-offload-nvptx-debuginforedhat-upgrade-libitmredhat-upgrade-libitm-debuginforedhat-upgrade-libitm-develredhat-upgrade-liblsanredhat-upgrade-liblsan-debuginforedhat-upgrade-libquadmathredhat-upgrade-libquadmath-debuginforedhat-upgrade-libquadmath-develredhat-upgrade-libstdcredhat-upgrade-libstdc-debuginforedhat-upgrade-libstdc-develredhat-upgrade-libstdc-docsredhat-upgrade-libstdc-staticredhat-upgrade-libtsanredhat-upgrade-libtsan-debuginforedhat-upgrade-libubsanredhat-upgrade-libubsan-debuginfo | Apr 29, 2020 | Sep 2, 2019 | |
| Suse | — | suse-upgrade-cpp7suse-upgrade-cpp9suse-upgrade-cross-nvptx-gcc7suse-upgrade-cross-nvptx-gcc9suse-upgrade-cross-nvptx-newlib7-develsuse-upgrade-cross-nvptx-newlib9-develsuse-upgrade-gcc7suse-upgrade-gcc7-32bitsuse-upgrade-gcc7-adasuse-upgrade-gcc7-ada-32bitsuse-upgrade-gcc7-csuse-upgrade-gcc7-c-32bitsuse-upgrade-gcc7-fortransuse-upgrade-gcc7-fortran-32bitsuse-upgrade-gcc7-gosuse-upgrade-gcc7-go-32bitsuse-upgrade-gcc7-infosuse-upgrade-gcc7-localesuse-upgrade-gcc7-obj-csuse-upgrade-gcc7-obj-c-32bitsuse-upgrade-gcc7-objcsuse-upgrade-gcc7-objc-32bitsuse-upgrade-gcc9suse-upgrade-gcc9-32bitsuse-upgrade-gcc9-adasuse-upgrade-gcc9-ada-32bitsuse-upgrade-gcc9-csuse-upgrade-gcc9-c-32bitsuse-upgrade-gcc9-fortransuse-upgrade-gcc9-fortran-32bitsuse-upgrade-gcc9-gosuse-upgrade-gcc9-go-32bitsuse-upgrade-gcc9-infosuse-upgrade-gcc9-localesuse-upgrade-libada7suse-upgrade-libada7-32bitsuse-upgrade-libada9suse-upgrade-libada9-32bitsuse-upgrade-libasan4suse-upgrade-libasan4-32bitsuse-upgrade-libasan5suse-upgrade-libasan5-32bitsuse-upgrade-libatomic1suse-upgrade-libatomic1-32bitsuse-upgrade-libcilkrts5suse-upgrade-libcilkrts5-32bitsuse-upgrade-libgcc_s1suse-upgrade-libgcc_s1-32bitsuse-upgrade-libgfortran4suse-upgrade-libgfortran4-32bitsuse-upgrade-libgfortran5suse-upgrade-libgfortran5-32bitsuse-upgrade-libgo11suse-upgrade-libgo11-32bitsuse-upgrade-libgo14suse-upgrade-libgo14-32bitsuse-upgrade-libgomp1suse-upgrade-libgomp1-32bitsuse-upgrade-libitm1suse-upgrade-libitm1-32bitsuse-upgrade-liblsan0suse-upgrade-libobjc4suse-upgrade-libobjc4-32bitsuse-upgrade-libquadmath0suse-upgrade-libquadmath0-32bitsuse-upgrade-libstdc-6suse-upgrade-libstdc-6-32bitsuse-upgrade-libstdc-6-devel-gcc7suse-upgrade-libstdc-6-devel-gcc7-32bitsuse-upgrade-libstdc-6-devel-gcc9suse-upgrade-libstdc-6-devel-gcc9-32bitsuse-upgrade-libstdc-6-localesuse-upgrade-libstdc-6-pp-gcc9suse-upgrade-libstdc-6-pp-gcc9-32bitsuse-upgrade-libtsan0suse-upgrade-libubsan0suse-upgrade-libubsan0-32bitsuse-upgrade-libubsan1suse-upgrade-libubsan1-32bit | Oct 24, 2019 | Sep 2, 2019 |
| Ubuntu | ubuntu-upgrade-gcc-10ubuntu-upgrade-gcc-7ubuntu-upgrade-gcc-8 | Nov 19, 2024 | Sep 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub