CVE-2017-11671

    Dashboard / Vulnerabilities / CVE-2017-11671

    CVE-2017-11671

    Published: 26 Jul 2017Last Modified: 8 Jul 2026

    Summary:

    Details: Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.

    References: http://openwall.com/lists/oss-security/2017/07/27/2, http://www.securityfocus.com/bid/100018, https://access.redhat.com/errata/RHSA-2018:0849, https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180, https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7a3af1a36b1965ae3d60e1f397a0d3ca17619d43
    Fixed -None

    Affected versions

    4.6

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2017-11671 | CVE-DB