UBUNTU-CVE-2017-11671

    Dashboard / Vulnerabilities / UBUNTU-CVE-2017-11671

    UBUNTU-CVE-2017-11671

    Published: 26 Jul 2017Last Modified: 20 May 2026
    Upstream:
    CVE-2017-11671
    Aliases:
    USN-5770-1

    Summary:

    Details: Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.

    References: https://ubuntu.com/security/CVE-2017-11671, https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180, https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html, http://www.openwall.com/lists/oss-security/2017/07/27/2, https://ubuntu.com/security/notices/USN-5770-1, https://www.cve.org/CVERecord?id=CVE-2017-11671

    Affected packages

    Package

    Name: gcc-3.3

    Purl: pkg:deb/ubuntu/gcc-3.3?arch=source&distro=trusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1:3.3.6ds1-25ubuntu4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2017-11671 | CVE-DB