CVE-2017-11671
MEDIUMGCC <5.5-6.4 - Info Disclosure
Title source: llmDescription
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
References (5)
Scores
CVSS v3
4.0
EPSS
0.0010
EPSS Percentile
28.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-338
Status
published
Products (14)
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
gnu/gcc
... and 4 more
Published
Jul 26, 2017
Tracked Since
Feb 18, 2026