Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:4.8:*:*:*:*:*:*:*

part: a version: 4.8 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.275797
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.275798
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.275800
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.275801
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.275802
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.275804
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.275805

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11671 vulnerable 2026-06-08 05:08:38.306580 Details available
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
Published: 2017-07-26T21:00:00.000Z
Updated: 2024-08-05T18:12:40.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.