CVE catalog

CVE-2014-5044

UBUNTU-

[CVE catalog]

Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.57% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntu16.04gcc-4.74.7.4-3ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu11UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu12UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armel-cross1.86UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armel-cross1.90UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armel-cross3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armhf-cross1.86UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armhf-cross1.87UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armhf-cross3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]

Showing 12 observations. All 54 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Ubuntu14.04gcc-4.74.7.3-10ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.74.7.3-11ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.74.7.3-12ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.74.7.3-7ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.74.7.3-8ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.74.7.3-9ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.74.7.3-9ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.1-10ubuntu8UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-10ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-10ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-12ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-13ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-14ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-14ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-14ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-15ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-16ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-16ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-16ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-16ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-16ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-17ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-17ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-19ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.2-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.84.8.4-2ubuntu1~14.04UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.8-arm64-cross0.11UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.8-arm64-cross0.11.1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.8-arm64-cross0.9UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.8-armhf-cross0.10UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.8-armhf-cross0.11UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-4.8-armhf-cross0.11.1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-mingw-w6411UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-mingw-w6412UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-mingw-w648UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu14.04gcc-mingw-w649UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu11UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu12UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.74.7.4-3ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armel-cross1.86UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armel-cross1.90UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armel-cross3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armhf-cross1.86UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armhf-cross1.87UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-4.7-armhf-cross3UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-arm-linux-androideabi0.20130705.1-0ubuntu8UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-arm-linux-androideabi0.20130705.1-0ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-arm-none-eabi15:4.9.3+svn227297-1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-arm-none-eabi15:4.9.3+svn227297-1build1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Ubuntu16.04gcc-arm-none-eabi15:4.9.3+svn231177-1UnknownSource applicability is not established[UBUNTU-CVE-2014-5044]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "gcc-4.8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.8.4-2ubuntu1~14.04"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "4.8.1-10ubuntu8",
        "4.8.2-1ubuntu1",
        "4.8.2-1ubuntu2",
        "4.8.2-10ubuntu1",
        "4.8.2-10ubuntu2",
        "4.8.2-12ubuntu2",
        "4.8.2-13ubuntu1",
        "4.8.2-14ubuntu1",
        "4.8.2-14ubuntu2",
        "4.8.2-14ubuntu4",
        "4.8.2-15ubuntu3",
        "4.8.2-16ubuntu1",
        "4.8.2-16ubuntu3",
        "4.8.2-16ubuntu4",
        "4.8.2-16ubuntu5",
        "4.8.2-16ubuntu6",
        "4.8.2-17ubuntu1",
        "4.8.2-17ubuntu2",
        "4.8.2-19ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "4.8.4-2ubuntu1~14.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-4.8-arm64-cross",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "0.9",
        "0.11"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "0.11.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-4.8-armhf-cross",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "0.10",
        "0.11"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "0.11.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-4.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "4.7.3-7ubuntu3",
        "4.7.3-8ubuntu1",
        "4.7.3-9ubuntu1",
        "4.7.3-9ubuntu2",
        "4.7.3-10ubuntu1",
        "4.7.3-11ubuntu1",
        "4.7.3-12ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-mingw-w64",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "8",
        "9",
        "11",
        "12"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-4.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "4.7.4-3ubuntu3",
        "4.7.4-3ubuntu7",
        "4.7.4-3ubuntu9",
        "4.7.4-3ubuntu10",
        "4.7.4-3ubuntu11",
        "4.7.4-3ubuntu12"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-4.7-armel-cross",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.86",
        "1.90",
        "3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-4.7-armhf-cross",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.86",
        "1.87",
        "3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-arm-linux-androideabi",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.20130705.1-0ubuntu8",
        "0.20130705.1-0ubuntu9"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    },
    {
      "name": "gcc-arm-none-eabi",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "15:4.9.3+svn227297-1",
        "15:4.9.3+svn227297-1build1",
        "15:4.9.3+svn231177-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2014-5044",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2014-5044",
      "provider_updated_at": "2026-04-22T09:46:44.000584Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]