Summary
Todd Eisenberger discovered that certain versions of GNU Compiler
Collection (GCC) could be made to clobber the status flag of RDRAND
and RDSEED with specially crafted input. This could potentially lead
to less randomness in random number generation.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gcc-5 | 5.4.0-6ubuntu1~16.04.12+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gccgo-6 | 6.0.1-0ubuntu1+esm1 |
Vulnerabilities 1
-
Unscored —
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4…
References
-
report
https://ubuntu.com/security/CVE-2017-11671