CVE-2017-11671

Published: 26 July 2017

Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.

Priority

Cvss 3 Severity Score

4.0

Score breakdown

Status

Package	Release	Status
gcc-3.3 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-4.4 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.4-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.4-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.5 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.5-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.5-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.6 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.6-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.6-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.7 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-4.7-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.7-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-4.7-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-4.7-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-4.8 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-4.8-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-4.9-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9-ppc64el-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-5 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (5.5.0-12ubuntu1)
	cosmic	Not vulnerable (5.5.0-12ubuntu1)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Released (5.5.0)
	xenial	Released (5.4.0-6ubuntu1~16.04.12+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	zesty	Ignored (end of life)
gcc-5-cross Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (33ubuntu2)
	cosmic	Not vulnerable (33ubuntu2)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-6 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (6.4.0-17ubuntu1)
	cosmic	Not vulnerable (6.4.0-17ubuntu1)
	disco	Not vulnerable (6.4.0-17ubuntu1)
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Released (6.4.0)
	xenial	Does not exist
	zesty	Ignored (end of life)
gcc-6-cross Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (30ubuntu3)
	cosmic	Not vulnerable (30ubuntu3)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Released (25)
	xenial	Does not exist
	zesty	Ignored (end of life)
gcc-6-cross-ports Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (28ubuntu3)
	cosmic	Not vulnerable (28ubuntu3)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Released (23)
	xenial	Does not exist
	zesty	Ignored (end of life)
gcc-7 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (7.3.0-16ubuntu3)
	cosmic	Not vulnerable (7.3.0-16ubuntu3)
	disco	Not vulnerable (7.3.0-16ubuntu3)
	eoan	Not vulnerable (7.3.0-16ubuntu3)
	focal	Not vulnerable (7.3.0-16ubuntu3)
	groovy	Not vulnerable (7.3.0-16ubuntu3)
	hirsute	Not vulnerable (7.3.0-16ubuntu3)
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Released (7.1.0)
	xenial	Does not exist
	zesty	Does not exist
gcc-7-cross Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (20ubuntu4)
	cosmic	Not vulnerable (20ubuntu4)
	disco	Not vulnerable (20ubuntu4)
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-7-cross-ports Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (16ubuntu4)
	cosmic	Not vulnerable (20ubuntu4)
	disco	Not vulnerable (20ubuntu4)
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-arm-linux-androideabi Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-arm-none-eabi Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-avr Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-defaults Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (code not present)
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Not vulnerable (code not present)
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
	zesty	Ignored (end of life)
gcc-defaults-arm64-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-defaults-armel-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-defaults-armhf-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-defaults-powerpc-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-defaults-ppc64el-cross Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gcc-h8300-hms Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-i686-linux-android Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-m68hc1x Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-mingw-w64 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-msp430 Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Needs triage
	cosmic	Ignored (end of life)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Needs triage
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Needs triage
	zesty	Ignored (end of life)
gcc-opt Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (code not present)
	cosmic	Not vulnerable (code not present)
	disco	Not vulnerable (code not present)
	eoan	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	groovy	Not vulnerable (code not present)
	hirsute	Not vulnerable (code not present)
	impish	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist (trusty was not-affected (code not present))
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
	zesty	Ignored (end of life)
gcc-snapshot Launchpad, Ubuntu, Debian	artful	Ignored (end of life)
	bionic	Not vulnerable (1:20180425-1ubuntu1)
	cosmic	Not vulnerable (1:20180425-1ubuntu1)
	disco	Not vulnerable (1:20180425-1ubuntu1)
	eoan	Not vulnerable (1:20180425-1ubuntu1)
	focal	Not vulnerable (1:20180425-1ubuntu1)
	groovy	Not vulnerable (1:20180425-1ubuntu1)
	hirsute	Not vulnerable (1:20180425-1ubuntu1)
	impish	Not vulnerable (1:20180425-1ubuntu1)
	jammy	Not vulnerable (1:20180425-1ubuntu1)
	kinetic	Not vulnerable (1:20180425-1ubuntu1)
	lunar	Not vulnerable (1:20180425-1ubuntu1)
	mantic	Not vulnerable (1:20180425-1ubuntu1)
	trusty	Does not exist (trusty was needs-triage)
	upstream	Released (2017-03-25)
	xenial	Needs triage
	zesty	Ignored (end of life)
gccgo-4.7 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gccgo-4.9 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Needs triage
	upstream	Needs triage
	xenial	Does not exist
	zesty	Does not exist
gccgo-6 Launchpad, Ubuntu, Debian	artful	Does not exist
	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Released (6.0.1-0ubuntu1+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	zesty	Does not exist

Severity score breakdown

Parameter	Value
Base score	4.0
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity impact	None
Availability impact	None
Vector	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›