CVE-2017-11671 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4 MEDIUM	LOCAL	LOW	NONE	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 23%

Affected Products (NVD)

Vendor	Product	Version
gnu	gcc	4.6
gnu	gcc	4.7
gnu	gcc	4.8
gnu	gcc	4.9
gnu	gcc	5.0
gnu	gcc	5.1
gnu	gcc	5.2
gnu	gcc	5.3
gnu	gcc	5.4
gnu	gcc	6.0
gnu	gcc	6.1
gnu	gcc	6.2
gnu	gcc	6.3

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

gcc-3.3

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	needs-triage
trusty	needs-triage
xenial	needs-triage
zesty	ignored

gcc-4.4

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.4-armel-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.4-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.5

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.5-armel-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.5-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.6

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.6-armel-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.6-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.7

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	needs-triage
xenial	needs-triage
zesty	ignored

gcc-4.7-arm64-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.7-armel-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-4.7-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-4.7-powerpc-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.8

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	needs-triage
xenial	needs-triage
zesty	ignored

gcc-4.8-arm64-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	dne

gcc-4.8-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	dne

gcc-4.8-powerpc-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	dne

gcc-4.8-ppc64el-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	dne

gcc-4.9

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-4.9-arm64-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.9-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.9-powerpc-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-4.9-ppc64el-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-5

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	Fixed 5.4.0-6ubuntu1~16.04.12+esm2 released
zesty	ignored

gcc-5-cross

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-6

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	ignored

gcc-6-cross

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	ignored

gcc-6-cross-ports

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	ignored

gcc-7

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-7-cross

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-7-cross-ports

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-arm-linux-androideabi

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-arm-none-eabi

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	needs-triage
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-avr

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	needs-triage
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-defaults

artful	ignored
bionic	not-affected
cosmic	ignored
disco	ignored
eoan	ignored
focal	not-affected
groovy	ignored
hirsute	ignored
impish	ignored
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	not-affected
xenial	not-affected
zesty	ignored

gcc-defaults-arm64-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-defaults-armel-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-defaults-armhf-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-defaults-powerpc-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-defaults-ppc64el-cross

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gcc-h8300-hms

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	needs-triage
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-i686-linux-android

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-m68hc1x

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-mingw-w64

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	needs-triage
trusty	needs-triage
xenial	needs-triage
zesty	ignored

gcc-msp430

artful	ignored
bionic	needs-triage
cosmic	ignored
disco	ignored
eoan	ignored
focal	needs-triage
groovy	ignored
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	dne
trusty	dne
xenial	needs-triage
zesty	ignored

gcc-opt

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	not-affected
zesty	ignored

gcc-snapshot

artful	ignored
bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	needs-triage
zesty	ignored

gccgo-4.7

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne
zesty	dne

gccgo-4.9

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	needs-triage
xenial	dne
zesty	dne

gccgo-6

artful	dne
bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	Fixed 6.0.1-0ubuntu1+esm1 released
zesty	dne

openSUSE / SLES Releases

openSUSE Product

Release

cpp48

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

gcc48

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

gcc48-32bit

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

gcc48-c++

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

gcc48-gij

suse enterprise desktop 12 SP2	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP3	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP4	4.8.5-31.17.1 fixed
suse enterprise server 12 SP5	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP2	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP3	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP4	4.8.5-31.17.1 fixed
suse enterprise workstation 12 SP5	4.8.5-31.3.1 fixed

gcc48-gij-32bit

suse enterprise desktop 12 SP2	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP3	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP4	4.8.5-31.17.1 fixed
suse enterprise server 12 SP5	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP2	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP3	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP4	4.8.5-31.17.1 fixed
suse enterprise workstation 12 SP5	4.8.5-31.3.1 fixed

gcc48-info

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

gcc48-locale

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

libasan0

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

libasan0-32bit

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

libgcj48

suse enterprise desktop 12 SP2	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP3	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP4	4.8.5-31.17.1 fixed
suse enterprise server 12 SP5	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP2	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP3	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP4	4.8.5-31.17.1 fixed
suse enterprise workstation 12 SP5	4.8.5-31.3.1 fixed

libgcj48-32bit

suse enterprise desktop 12 SP2	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP3	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP4	4.8.5-31.17.1 fixed
suse enterprise server 12 SP5	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP2	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP3	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP4	4.8.5-31.17.1 fixed
suse enterprise workstation 12 SP5	4.8.5-31.3.1 fixed

libgcj48-jar

suse enterprise desktop 12 SP2	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP3	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP4	4.8.5-31.17.1 fixed
suse enterprise server 12 SP5	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP2	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP3	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP4	4.8.5-31.17.1 fixed
suse enterprise workstation 12 SP5	4.8.5-31.3.1 fixed

libgcj_bc1

suse enterprise desktop 12 SP2	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP3	4.8.5-31.3.1 fixed
suse enterprise desktop 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP4	4.8.5-31.17.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP4	4.8.5-31.17.1 fixed
suse enterprise server 12 SP5	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP2	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP3	4.8.5-31.3.1 fixed
suse enterprise workstation 12 SP4	4.8.5-31.17.1 fixed
suse enterprise workstation 12 SP5	4.8.5-31.3.1 fixed

libstdc++48-devel

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

libstdc++48-devel-32bit

suse enterprise sap 12 SP2	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP3	4.8.5-31.3.1 fixed
suse enterprise sap 12 SP5	4.8.5-31.20.1 fixed
suse enterprise server 12	4.8.5-31.3.1 fixed
suse enterprise server 12 SP1	4.8.5-31.3.1 fixed
suse enterprise server 12 SP2	4.8.5-31.3.1 fixed
suse enterprise server 12 SP3	4.8.5-31.3.1 fixed
suse enterprise server 12 SP5	4.8.5-31.20.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

cpp

RHEL 7

0:4.8.5-28.el7

fixed

gcc

RHEL 7

0:4.8.5-28.el7

fixed

gcc-c

RHEL 7

0:4.8.5-28.el7

fixed

gcc-gfortran

RHEL 7

0:4.8.5-28.el7

fixed

gcc-gnat

RHEL 7

0:4.8.5-28.el7

fixed

gcc-go

RHEL 7

0:4.8.5-28.el7

fixed

gcc-objc

RHEL 7

0:4.8.5-28.el7

fixed

gcc-plugin-devel

RHEL 7

0:4.8.5-28.el7

fixed

libasan

RHEL 7

0:4.8.5-28.el7

fixed

libasan-static

RHEL 7

0:4.8.5-28.el7

fixed

libatomic

RHEL 7

0:4.8.5-28.el7

fixed

libatomic-static

RHEL 7

0:4.8.5-28.el7

fixed

libgcc

RHEL 7

0:4.8.5-28.el7

fixed

libgfortran

RHEL 7

0:4.8.5-28.el7

fixed

libgfortran-static

RHEL 7

0:4.8.5-28.el7

fixed

libgnat

RHEL 7

0:4.8.5-28.el7

fixed

libgnat-devel

RHEL 7

0:4.8.5-28.el7

fixed

libgnat-static

RHEL 7

0:4.8.5-28.el7

fixed

libgo

RHEL 7

0:4.8.5-28.el7

fixed

libgo-devel

RHEL 7

0:4.8.5-28.el7

fixed

libgo-static

RHEL 7

0:4.8.5-28.el7

fixed

libgomp

RHEL 7

0:4.8.5-28.el7

fixed

libitm

RHEL 7

0:4.8.5-28.el7

fixed

libitm-devel

RHEL 7

0:4.8.5-28.el7

fixed

libitm-static

RHEL 7

0:4.8.5-28.el7

fixed

libmudflap

RHEL 7

0:4.8.5-28.el7

fixed

libmudflap-devel

RHEL 7

0:4.8.5-28.el7

fixed

libmudflap-static

RHEL 7

0:4.8.5-28.el7

fixed

libobjc

RHEL 7

0:4.8.5-28.el7

fixed

libquadmath

RHEL 7

0:4.8.5-28.el7

fixed

libquadmath-devel

RHEL 7

0:4.8.5-28.el7

fixed

libquadmath-static

RHEL 7

0:4.8.5-28.el7

fixed

libstdc

RHEL 7

0:4.8.5-28.el7

fixed

libtsan

RHEL 7

0:4.8.5-28.el7

fixed

libtsan-static

RHEL 7

0:4.8.5-28.el7

fixed

Common Weakness Enumeration

CWE-338 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

References

http://openwall.com/lists/oss-security/2017/07/27/2

http://www.securityfocus.com/bid/100018

https://access.redhat.com/errata/RHSA-2018:0849

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180

https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html

http://openwall.com/lists/oss-security/2017/07/27/2

http://www.securityfocus.com/bid/100018

https://access.redhat.com/errata/RHSA-2018:0849

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180

https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html

Vendor	Product	Version
gnu	gcc	4.6
gnu	gcc	4.7
gnu	gcc	4.8
gnu	gcc	4.9
gnu	gcc	5.0
gnu	gcc	5.1
gnu	gcc	5.2
gnu	gcc	5.3
gnu	gcc	5.4
gnu	gcc	6.0
gnu	gcc	6.1
gnu	gcc	6.2
gnu	gcc	6.3

Vendor	Product	Version
gnu	gcc	4.6
gnu	gcc	4.7
gnu	gcc	4.8
gnu	gcc	4.9
gnu	gcc	5.0
gnu	gcc	5.1
gnu	gcc	5.2
gnu	gcc	5.3
gnu	gcc	5.4
gnu	gcc	6.0
gnu	gcc	6.1
gnu	gcc	6.2
gnu	gcc	6.3

Vendor	Product	Version
gnu	gcc	4.6
gnu	gcc	4.7
gnu	gcc	4.8
gnu	gcc	4.9
gnu	gcc	5.0
gnu	gcc	5.1
gnu	gcc	5.2
gnu	gcc	5.3
gnu	gcc	5.4
gnu	gcc	6.0
gnu	gcc	6.1
gnu	gcc	6.2
gnu	gcc	6.3