CVE-2015-5276

Currently unrated

Key Information:

Vendor
Gnu
Status
Gcc
Vendor
CVE Published:
17 November 2015

Summary

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

References

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65142
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1262846
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2015-11/msg000...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.