Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:4.9:*:*:*:*:*:*:*

part: a version: 4.9 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.275863
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.275864
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.275866
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.275867
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.275868
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.275870
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.275871

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11671 vulnerable 2026-06-03 14:36:29.149225 Details available
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
Published: 2017-07-26T21:00:00.000Z
Updated: 2024-08-05T18:12:40.692Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.