Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:6.3:*:*:*:*:*:*:*

part: a version: 6.3 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.276003
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.276005
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.276006
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.276007
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.276009
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.276010
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.276011

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11671 vulnerable 2026-06-03 14:36:29.153633 Details available
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
Published: 2017-07-26T21:00:00.000Z
Updated: 2024-08-05T18:12:40.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.