CVE-2014-5044

Published: 7 March 2018

Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.

Notes

Author	Note
sbeattie	issues are in libgfortran/fortran runtime gcc-avr only builds gcc and g++ compilers/runtimes gcc-X.X-cross packages have fortran compiler/runtimes in universe gcc-XX-defaults packages do not actually include gcc, just symlinks to the default version to use per release/arch/tool gccgo packages are (surprise!) only interested in go runtimes gcc-opt is a wrapper for setting gcc arguments
eslerm	addressed in gcc-5.1.0 by 92e6f3a43ec ("Introduce xmallocarray, an overflow checking variant of xmalloc.")

Author

Note

sbeattie

issues are in libgfortran/fortran runtime
gcc-avr only builds gcc and g++ compilers/runtimes
gcc-X.X-cross packages have fortran compiler/runtimes in
universe
gcc-XX-defaults packages do not actually include gcc, just
symlinks to the default version to use per release/arch/tool
gccgo packages are (surprise!) only interested in go runtimes
gcc-opt is a wrapper for setting gcc arguments

eslerm

addressed in gcc-5.1.0 by 92e6f3a43ec ("Introduce xmallocarray, an overflow checking variant of xmalloc.")

Priority

Cvss 3 Severity Score

9.8

Score breakdown

Status

Package	Release	Status
gcc-3.3 Launchpad, Ubuntu, Debian	artful	Not vulnerable (provides libstdc++5 only)
	bionic	Not vulnerable (provides libstdc++5 only)
	cosmic	Not vulnerable (provides libstdc++5 only)
	disco	Not vulnerable (provides libstdc++5 only)
	eoan	Not vulnerable (provides libstdc++5 only)
	focal	Not vulnerable (provides libstdc++5 only)
	groovy	Not vulnerable (provides libstdc++5 only)
	hirsute	Not vulnerable (provides libstdc++5 only)
	impish	Not vulnerable (provides libstdc++5 only)
	jammy	Not vulnerable (provides libstdc++5 only)
	kinetic	Not vulnerable (provides libstdc++5 only)
	lucid	Does not exist
	lunar	Not vulnerable (provides libstdc++5 only)
	mantic	Not vulnerable (provides libstdc++5 only)
	precise	Not vulnerable (provides libstdc++5 only)
	trusty	Not vulnerable (provides libstdc++5 only)
	upstream	Needed
	utopic	Not vulnerable (provides libstdc++5 only)
	vivid	Not vulnerable (provides libstdc++5 only)
	wily	Not vulnerable (provides libstdc++5 only)
	xenial	Not vulnerable (provides libstdc++5 only)
	yakkety	Not vulnerable (provides libstdc++5 only)
	zesty	Not vulnerable (provides libstdc++5 only)
gcc-4.1 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Ignored (end of life)
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.3 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Ignored (end of life)
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.4 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Ignored (end of life)
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.4-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.4-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.5 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.5-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.5-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.6 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.6-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.6-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.7 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Needed
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Needed
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-4.7-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.7-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Needed
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-4.7-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Needed
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-4.7-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-4.8 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (4.8.4-2ubuntu1~14.04)
	cosmic	Not vulnerable (4.8.4-2ubuntu1~14.04)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Released (4.8.4-2ubuntu1~14.04)
	upstream	Released (4.8.3-7)
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Not vulnerable (4.8.4-2ubuntu1~14.04)
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-4.8-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Released (0.11.1)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Not vulnerable (2)
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Released (0.11.1)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Not vulnerable (2)
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Not vulnerable (2)
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Not vulnerable (2)
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (4.9.1-4)
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Released (4.9.1-4ubuntu1)
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-4.9-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9-ppc64el-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-arm-linux-androideabi Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Needed
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-arm-none-eabi Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (15:6.3.1+svn253039-1build1)
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Not vulnerable (15:9-2019-q4-0ubuntu1)
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Not vulnerable (15:10.3-2021.07-4)
	kinetic	Ignored (end of life, was needed)
	lucid	Does not exist
	lunar	Not vulnerable (15:12.2.rel1-1)
	mantic	Not vulnerable (15:12.2.rel1-1)
	precise	Does not exist
	trusty	Does not exist (trusty was needed)
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Needed
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-avr Launchpad, Ubuntu, Debian	artful	Not vulnerable (provides C/C++ runtimes only)
	bionic	Not vulnerable (provides C/C++ runtimes only)
	cosmic	Not vulnerable (provides C/C++ runtimes only)
	disco	Not vulnerable (provides C/C++ runtimes only)
	eoan	Not vulnerable (provides C/C++ runtimes only)
	focal	Not vulnerable (provides C/C++ runtimes only)
	groovy	Not vulnerable (provides C/C++ runtimes only)
	hirsute	Not vulnerable (provides C/C++ runtimes only)
	impish	Not vulnerable (provides C/C++ runtimes only)
	jammy	Not vulnerable (provides C/C++ runtimes only)
	kinetic	Not vulnerable (provides C/C++ runtimes only)
	lucid	Not vulnerable (provides C/C++ runtimes only)
	lunar	Not vulnerable (provides C/C++ runtimes only)
	mantic	Not vulnerable (provides C/C++ runtimes only)
	precise	Not vulnerable (provides C/C++ runtimes only)
	trusty	Does not exist (trusty was not-affected [provides C/C++ runtimes only])
	upstream	Needs triage
	utopic	Not vulnerable (provides C/C++ runtimes only)
	vivid	Not vulnerable (provides C/C++ runtimes only)
	wily	Not vulnerable (provides C/C++ runtimes only)
	xenial	Not vulnerable (provides C/C++ runtimes only)
	yakkety	Not vulnerable (provides C/C++ runtimes only)
	zesty	Not vulnerable (provides C/C++ runtimes only)
gcc-defaults Launchpad, Ubuntu, Debian	artful	Not vulnerable
	bionic	Not vulnerable
	cosmic	Not vulnerable
	disco	Not vulnerable
	eoan	Not vulnerable
	focal	Not vulnerable
	groovy	Not vulnerable
	hirsute	Not vulnerable
	impish	Not vulnerable
	jammy	Not vulnerable
	kinetic	Not vulnerable
	lucid	Not vulnerable
	lunar	Not vulnerable
	mantic	Not vulnerable
	precise	Not vulnerable
	trusty	Not vulnerable
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Not vulnerable
	yakkety	Not vulnerable
	zesty	Not vulnerable
gcc-defaults-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-defaults-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Not vulnerable
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-defaults-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Not vulnerable
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-defaults-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-defaults-ppc64el-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-h8300-hms Launchpad, Ubuntu, Debian	artful	Not vulnerable (provides C/C++ runtimes only)
	bionic	Not vulnerable (provides C/C++ runtimes only)
	cosmic	Not vulnerable (provides C/C++ runtimes only)
	disco	Not vulnerable (provides C/C++ runtimes only)
	eoan	Not vulnerable (provides C/C++ runtimes only)
	focal	Not vulnerable (provides C/C++ runtimes only)
	groovy	Not vulnerable (provides C/C++ runtimes only)
	hirsute	Not vulnerable (provides C/C++ runtimes only)
	impish	Not vulnerable (provides C/C++ runtimes only)
	jammy	Not vulnerable (provides C/C++ runtimes only)
	kinetic	Not vulnerable (provides C/C++ runtimes only)
	lucid	Not vulnerable (provides C/C++ runtimes only)
	lunar	Not vulnerable (provides C/C++ runtimes only)
	mantic	Not vulnerable (provides C/C++ runtimes only)
	precise	Not vulnerable (provides C/C++ runtimes only)
	trusty	Does not exist (trusty was not-affected [provides C/C++ runtimes only])
	upstream	Needed
	utopic	Not vulnerable (provides C/C++ runtimes only)
	vivid	Not vulnerable (provides C/C++ runtimes only)
	wily	Not vulnerable (provides C/C++ runtimes only)
	xenial	Not vulnerable (provides C/C++ runtimes only)
	yakkety	Not vulnerable (provides C/C++ runtimes only)
	zesty	Not vulnerable (provides C/C++ runtimes only)
gcc-i686-linux-android Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected [provides C/C++ toolchain only])
	upstream	Needed
	utopic	Not vulnerable (provides C/C++ toolchain only)
	vivid	Not vulnerable (provides C/C++ toolchain only)
	wily	Not vulnerable (provides C/C++ toolchain only)
	xenial	Not vulnerable (provides C/C++ toolchain only)
	yakkety	Not vulnerable (provides C/C++ toolchain only)
	zesty	Not vulnerable (provides C/C++ toolchain only)
gcc-m68hc1x Launchpad, Ubuntu, Debian	artful	Not vulnerable (provides C runtime only)
	bionic	Not vulnerable (provides C runtime only)
	cosmic	Not vulnerable (provides C runtime only)
	disco	Not vulnerable (provides C runtime only)
	eoan	Not vulnerable (provides C runtime only)
	focal	Not vulnerable (provides C runtime only)
	groovy	Not vulnerable (provides C runtime only)
	hirsute	Not vulnerable (provides C runtime only)
	impish	Not vulnerable (provides C runtime only)
	jammy	Not vulnerable (provides C runtime only)
	kinetic	Not vulnerable (provides C runtime only)
	lucid	Not vulnerable (provides C runtime only)
	lunar	Does not exist
	mantic	Does not exist
	precise	Not vulnerable (provides C runtime only)
	trusty	Does not exist (trusty was not-affected [provides C runtime only])
	upstream	Needed
	utopic	Not vulnerable (provides C runtime only)
	vivid	Not vulnerable (provides C runtime only)
	wily	Not vulnerable (provides C runtime only)
	xenial	Not vulnerable (provides C runtime only)
	yakkety	Not vulnerable (provides C runtime only)
	zesty	Not vulnerable (provides C runtime only)
gcc-mingw-w64 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (16)
	cosmic	Not vulnerable (16)
	disco	Not vulnerable (16)
	eoan	Not vulnerable (16)
	focal	Not vulnerable (16)
	groovy	Not vulnerable (16)
	hirsute	Not vulnerable (16)
	impish	Not vulnerable (16)
	jammy	Not vulnerable (16)
	kinetic	Not vulnerable (16)
	lucid	Does not exist
	lunar	Not vulnerable (16)
	mantic	Not vulnerable (16)
	precise	Ignored (end of life)
	trusty	Needed
	upstream	Needed
	utopic	Ignored (end of life)
	vivid	Ignored (end of life)
	wily	Ignored (end of life)
	xenial	Not vulnerable (16)
	yakkety	Ignored (end of life)
	zesty	Ignored (end of life)
gcc-mingw32 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Ignored (end of life)
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needed
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gcc-msp430 Launchpad, Ubuntu, Debian	artful	Not vulnerable (provides C/C++ runtimes only)
	bionic	Not vulnerable (provides C/C++ runtimes only)
	cosmic	Not vulnerable (provides C/C++ runtimes only)
	disco	Not vulnerable (provides C/C++ runtimes only)
	eoan	Not vulnerable (provides C/C++ runtimes only)
	focal	Not vulnerable (provides C/C++ runtimes only)
	groovy	Not vulnerable (provides C/C++ runtimes only)
	hirsute	Not vulnerable (provides C/C++ runtimes only)
	impish	Not vulnerable (provides C/C++ runtimes only)
	jammy	Not vulnerable (provides C/C++ runtimes only)
	kinetic	Not vulnerable (provides C/C++ runtimes only)
	lucid	Does not exist
	lunar	Not vulnerable (provides C/C++ runtimes only)
	mantic	Not vulnerable (provides C/C++ runtimes only)
	precise	Not vulnerable (provides C/C++ runtimes only)
	trusty	Does not exist (trusty was not-affected [provides C/C++ runtimes only])
	upstream	Needed
	utopic	Not vulnerable (provides C/C++ runtimes only)
	vivid	Not vulnerable (provides C/C++ runtimes only)
	wily	Not vulnerable (provides C/C++ runtimes only)
	xenial	Not vulnerable (provides C/C++ runtimes only)
	yakkety	Not vulnerable (provides C/C++ runtimes only)
	zesty	Not vulnerable (provides C/C++ runtimes only)
gcc-opt Launchpad, Ubuntu, Debian	artful	Not vulnerable
	bionic	Not vulnerable
	cosmic	Not vulnerable
	disco	Not vulnerable
	eoan	Not vulnerable
	focal	Not vulnerable
	groovy	Not vulnerable
	hirsute	Not vulnerable
	impish	Not vulnerable
	jammy	Not vulnerable
	kinetic	Not vulnerable
	lucid	Does not exist
	lunar	Not vulnerable
	mantic	Not vulnerable
	precise	Not vulnerable
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Not vulnerable
	yakkety	Not vulnerable
	zesty	Not vulnerable
gcc-snapshot Launchpad, Ubuntu, Debian	artful	Not vulnerable (20140715-0ubuntu1)
	bionic	Not vulnerable (20140715-0ubuntu1)
	cosmic	Not vulnerable (20140715-0ubuntu1)
	disco	Not vulnerable (20140715-0ubuntu1)
	eoan	Not vulnerable (20140715-0ubuntu1)
	focal	Not vulnerable (20140715-0ubuntu1)
	groovy	Not vulnerable (20140715-0ubuntu1)
	hirsute	Not vulnerable (20140715-0ubuntu1)
	impish	Not vulnerable (20140715-0ubuntu1)
	jammy	Not vulnerable (20140715-0ubuntu1)
	kinetic	Not vulnerable (20140715-0ubuntu1)
	lucid	Ignored (end of life)
	lunar	Not vulnerable (20140715-0ubuntu1)
	mantic	Not vulnerable (20140715-0ubuntu1)
	precise	Ignored (end of life)
	trusty	Does not exist (trusty was needed)
	upstream	Released (4.10-20140622)
	utopic	Not vulnerable (20140715-0ubuntu1)
	vivid	Not vulnerable (20140715-0ubuntu1)
	wily	Not vulnerable (20140715-0ubuntu1)
	xenial	Not vulnerable (20140715-0ubuntu1)
	yakkety	Not vulnerable (20140715-0ubuntu1)
	zesty	Not vulnerable (20140715-0ubuntu1)
gccgo-4.7 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Not vulnerable
	trusty	Does not exist
	upstream	Not vulnerable
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gccgo-4.9 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Not vulnerable
	upstream	Not vulnerable
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist
gccgo-go Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lucid	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected)
	upstream	Not vulnerable
	utopic	Not vulnerable
	vivid	Does not exist
	wily	Does not exist
	xenial	Does not exist
	yakkety	Does not exist
	zesty	Does not exist

Severity score breakdown

Parameter	Value
Base score	9.8
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›