Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.275938
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.275940
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.275941
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.275942
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.275944
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.275945
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.275946

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11671 vulnerable 2026-06-03 14:36:29.150779 Details available
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
Published: 2017-07-26T21:00:00.000Z
Updated: 2024-08-05T18:12:40.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.