Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:5.4:*:*:*:*:*:*:*

part: a version: 5.4 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.275957
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.275958
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.275960
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.275961
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.275962
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.275964
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.275965

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11671 vulnerable 2026-06-08 05:08:38.309735 Details available
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
Published: 2017-07-26T21:00:00.000Z
Updated: 2024-08-05T18:12:40.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.