CVE-2017-11671

MEDIUM

GCC <5.5-6.4 - Info Disclosure

Title source: llm

Description

Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.

Scores

CVSS v3 4.0
EPSS 0.0010
EPSS Percentile 28.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-338
Status published
Products (14)
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
... and 4 more
Published Jul 26, 2017
Tracked Since Feb 18, 2026