Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:4.3:*:*:*:*:*:*:*

part: a version: 4.3 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.275486
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.275488
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.275490
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.275491
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.275492
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.275494
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.275495

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1367 vulnerable 2026-06-08 04:50:20.093887 Details available
gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
Published: 2008-03-17T23:00:00.000Z
Updated: 2024-08-07T08:17:34.582Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.