CVE-2017-11671
Severity
4.0MEDIUM
EPSS
0.1%
top 71.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 26
Latest updateDec 8
Description
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.5 | Impact: 1.4
🔴Vulnerability Details
3GHSA▶
GHSA-9qgp-g97v-qq69: Under certain circumstances, the ix86_expand_builtin function in i386↗2022-05-14
CVEList
▶
OSV
▶
📋Vendor Advisories
2💬Community
4Bugzilla▶
CVE-2017-11671 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics [fedora-25]↗2017-07-27
Bugzilla▶
CVE-2017-11671 mingw-gcc: gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics [fedora-25]↗2017-07-27
Bugzilla▶
CVE-2017-11671 mingw-gcc: gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics [epel-all]↗2017-07-27