CVE catalog

CVE-2015-5276

Security update for gcc5

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.94% · Oct 25, 2026

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugcc-4.714.044.7.3-7ubuntu3vulnerable
Ubuntugcc-4.714.044.7.3-8ubuntu1vulnerable
Ubuntugcc-4.714.044.7.3-9ubuntu1vulnerable
Ubuntugcc-4.714.044.7.3-9ubuntu2vulnerable
Ubuntugcc-4.714.044.7.3-10ubuntu1vulnerable
Ubuntugcc-4.714.044.7.3-11ubuntu1vulnerable
Ubuntugcc-4.714.044.7.3-12ubuntu1vulnerable
Ubuntugcc-4.814.044.8.1-10ubuntu8vulnerable
Ubuntugcc-4.814.044.8.2-1ubuntu1vulnerable
Ubuntugcc-4.814.044.8.2-1ubuntu2vulnerable
Ubuntugcc-4.814.044.8.2-10ubuntu1vulnerable
Ubuntugcc-4.814.044.8.2-10ubuntu2vulnerable
Ubuntugcc-4.814.044.8.2-12ubuntu2vulnerable
Ubuntugcc-4.814.044.8.2-13ubuntu1vulnerable
Ubuntugcc-4.814.044.8.2-14ubuntu1vulnerable
Ubuntugcc-4.814.044.8.2-14ubuntu2vulnerable
Ubuntugcc-4.814.044.8.2-14ubuntu4vulnerable
Ubuntugcc-4.814.044.8.2-15ubuntu3vulnerable
Ubuntugcc-4.814.044.8.2-16ubuntu1vulnerable
Ubuntugcc-4.814.044.8.2-16ubuntu3vulnerable
Ubuntugcc-4.814.044.8.2-16ubuntu4vulnerable
Ubuntugcc-4.814.044.8.2-16ubuntu5vulnerable
Ubuntugcc-4.814.044.8.2-16ubuntu6vulnerable
Ubuntugcc-4.814.044.8.2-17ubuntu1vulnerable
Ubuntugcc-4.814.044.8.2-17ubuntu2vulnerable
Ubuntugcc-4.814.044.8.2-19ubuntu1vulnerable
Ubuntugcc-4.814.044.8.4-2ubuntu1~14.04vulnerable
Ubuntugcc-4.814.044.8.4-2ubuntu1~14.04.1vulnerable
Ubuntugcc-4.814.044.8.4-2ubuntu1~14.04.3vulnerable
Ubuntugcc-4.814.044.8.4-2ubuntu1~14.04.4vulnerable
Ubuntugcc-mingw-w6414.048vulnerable
Ubuntugcc-mingw-w6414.049vulnerable
Ubuntugcc-mingw-w6414.0411vulnerable
Ubuntugcc-mingw-w6414.0412vulnerable
Ubuntugcc-4.716.044.7.4-3ubuntu3vulnerable
Ubuntugcc-4.716.044.7.4-3ubuntu7vulnerable
Ubuntugcc-4.716.044.7.4-3ubuntu9vulnerable
Ubuntugcc-4.716.044.7.4-3ubuntu10vulnerable
Ubuntugcc-4.716.044.7.4-3ubuntu11vulnerable
Ubuntugcc-4.716.044.7.4-3ubuntu12vulnerable
Ubuntugcc-4.7-armel-cross16.041.86vulnerable
Ubuntugcc-4.7-armel-cross16.041.90vulnerable
Ubuntugcc-4.7-armel-cross16.043vulnerable
Ubuntugcc-4.7-armhf-cross16.041.86vulnerable
Ubuntugcc-4.7-armhf-cross16.041.87vulnerable
Ubuntugcc-4.7-armhf-cross16.043vulnerable
Ubuntugcc-4.816.044.8.5-1ubuntu1vulnerable
Ubuntugcc-4.816.044.8.5-2ubuntu1vulnerable
Ubuntugcc-4.816.044.8.5-3ubuntu1vulnerable
Ubuntugcc-4.816.044.8.5-3ubuntu2vulnerable
Ubuntugcc-4.816.044.8.5-3ubuntu3vulnerable
Ubuntugcc-4.816.044.8.5-4ubuntu1vulnerable
Ubuntugcc-4.816.044.8.5-4ubuntu2vulnerable
Ubuntugcc-4.8-arm64-cross16.040.17vulnerable
Ubuntugcc-4.8-arm64-cross16.040.18vulnerable
Ubuntugcc-4.8-arm64-cross16.042vulnerable
Ubuntugcc-4.8-armhf-cross16.040.16vulnerable
Ubuntugcc-4.8-armhf-cross16.040.17vulnerable
Ubuntugcc-4.8-armhf-cross16.042vulnerable
Ubuntugcc-4.8-powerpc-cross16.040.19vulnerable
Ubuntugcc-4.8-powerpc-cross16.040.20vulnerable
Ubuntugcc-4.8-powerpc-cross16.043vulnerable
Ubuntugcc-4.8-ppc64el-cross16.040.8vulnerable
Ubuntugcc-4.8-ppc64el-cross16.040.9vulnerable
Ubuntugcc-4.8-ppc64el-cross16.042vulnerable
Ubuntugcc-arm-linux-androideabi16.040.20130705.1-0ubuntu8vulnerable
Ubuntugcc-arm-linux-androideabi16.040.20130705.1-0ubuntu9vulnerable
Ubuntugcc-arm-none-eabi16.0415:4.9.3+svn227297-1vulnerable
Ubuntugcc-arm-none-eabi16.0415:4.9.3+svn227297-1build1vulnerable
Ubuntugcc-arm-none-eabi16.0415:4.9.3+svn231177-1vulnerable
Ubuntugcc-avr16.041:4.8.1+Atmel3.4.5-1vulnerable
Ubuntugcc-avr16.041:4.9.2+Atmel3.5.0-1vulnerable
Ubuntugcc-i686-linux-android16.047vulnerable
Ubuntugcc-i686-linux-android16.049vulnerable
Ubuntugcc-msp43016.044.6.3~mspgcc-20120406-7ubuntu3vulnerable
Ubuntugcc-4.818.044.8.5-4ubuntu6vulnerable
Ubuntugcc-4.818.044.8.5-4ubuntu7vulnerable
Ubuntugcc-4.818.044.8.5-4ubuntu8vulnerable
Ubuntugcc-msp43018.044.6.3~mspgcc-20120406-7ubuntu4vulnerable
Ubuntugcc-msp43018.044.6.3~mspgcc-20120406-7ubuntu5vulnerable
Ubuntugcc-msp43020.044.6.3~mspgcc-20120406-7.1ubuntu3vulnerable
Ubuntugcc-msp43022.044.6.3~mspgcc-20120406-7.1ubuntu3vulnerable
SuseMozillaFirefoxlinux enterprise software development kit 11 sp452.2.0esr-72.5.2fixed
Susemozilla-nsslinux enterprise software development kit 11 sp43.29.5-47.3.2fixed
SuseMozillaFirefoxlinux enterprise point of sale 11 sp352.2.0esr-72.5.2fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise point of sale 11 sp352-24.3.44fixed
Susefirefox-gcc5linux enterprise point of sale 11 sp35.3.1+r233831-7.1fixed
Susefirefox-libffi-gcc5linux enterprise point of sale 11 sp35.3.1+r233831-7.1fixed
Susemozilla-nsslinux enterprise point of sale 11 sp33.29.5-47.3.2fixed
SuseMozillaFirefoxlinux enterprise server 11 sp3-ltss52.2.0esr-72.5.2fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server 11 sp3-ltss52-24.3.44fixed
Susefirefox-gcc5linux enterprise server 11 sp3-ltss5.3.1+r233831-7.1fixed
Susefirefox-libffi-gcc5linux enterprise server 11 sp3-ltss5.3.1+r233831-7.1fixed
Susemozilla-nsslinux enterprise server 11 sp3-ltss3.29.5-47.3.2fixed
SuseMozillaFirefoxlinux enterprise server 11 sp3-teradata52.2.0esr-72.5.2fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server 11 sp3-teradata52-24.3.44fixed
Susefirefox-gcc5linux enterprise server 11 sp3-teradata5.3.1+r233831-7.1fixed
Susefirefox-libffi-gcc5linux enterprise server 11 sp3-teradata5.3.1+r233831-7.1fixed
Susemozilla-nsslinux enterprise server 11 sp3-teradata3.29.5-47.3.2fixed
SuseMozillaFirefoxlinux enterprise server 11 sp452.2.0esr-72.5.2fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server 11 sp452-24.3.44fixed
Susefirefox-gcc5linux enterprise server 11 sp45.3.1+r233831-7.1fixed
Susefirefox-libffi-gcc5linux enterprise server 11 sp45.3.1+r233831-7.1fixed
Susemozilla-nsslinux enterprise server 11 sp43.29.5-47.3.2fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 11 sp452.2.0esr-72.5.2fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server for sap applications 11 sp452-24.3.44fixed
Susefirefox-gcc5linux enterprise server for sap applications 11 sp45.3.1+r233831-7.1fixed
Susefirefox-libffi-gcc5linux enterprise server for sap applications 11 sp45.3.1+r233831-7.1fixed
Susemozilla-nsslinux enterprise server for sap applications 11 sp43.29.5-47.3.2fixed
Susegcc48linux enterprise desktop 124.8.5-24.1fixed
Suselibgcj48linux enterprise desktop 124.8.5-24.1fixed
Susegcc48linux enterprise software development kit 124.8.5-24.1fixed
Suselibffi48linux enterprise software development kit 124.8.5-24.1fixed
Suselibgcj48linux enterprise software development kit 124.8.5-24.1fixed
Susegcc48linux enterprise server 124.8.5-24.1fixed
Suselibffi48linux enterprise server 124.8.5-24.1fixed
Susegcc48linux enterprise server for sap applications 124.8.5-24.1fixed
Suselibffi48linux enterprise server for sap applications 124.8.5-24.1fixed
Suselibgcj48linux enterprise workstation extension 124.8.5-24.1fixed
Opensusegcc5tumbleweed5.4.1+r240125-1.5fixed
Susegcc5linux enterprise desktop 125.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise desktop 125.3.1+r233831-9.1fixed
Susegcc5linux enterprise desktop 12 sp15.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise desktop 12 sp15.3.1+r233831-9.1fixed
Susegcc5linux enterprise module for toolchain 125.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise module for toolchain 125.3.1+r233831-9.1fixed
Susegcc5linux enterprise software development kit 12 sp15.3.1+r233831-9.1fixed
Susegcc5linux enterprise server 125.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise server 125.3.1+r233831-9.1fixed
Susegcc5linux enterprise server for sap applications 125.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise server for sap applications 125.3.1+r233831-9.1fixed
Susegcc5linux enterprise server 12 sp15.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise server 12 sp15.3.1+r233831-9.1fixed
Susegcc5linux enterprise server for sap applications 12 sp15.3.1+r233831-9.1fixed
Suselibffi-gcc5linux enterprise server for sap applications 12 sp15.3.1+r233831-9.1fixed
Susegcc48linux enterprise software development kit 11 sp44.8.5-4.2fixed
Susegcc5linux enterprise software development kit 11 sp45.3.1+r233831-10.1fixed
Suselibffi-gcc5linux enterprise software development kit 11 sp45.3.1+r233831-10.1fixed
Susegcc5linux enterprise desktop 11 sp45.3.1+r233831-10.1fixed
Susegcc5linux enterprise server 11 sp45.3.1+r233831-10.1fixed
Suselibffi-gcc5linux enterprise server 11 sp45.3.1+r233831-10.1fixed
Susegcc5linux enterprise server for sap applications 11 sp45.3.1+r233831-10.1fixed
Suselibffi-gcc5linux enterprise server for sap applications 11 sp45.3.1+r233831-10.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
SuseMozillaFirefoxrpmlinux enterprise software development kit 11 sp452.2.0esr-72.5.2Not reportedSUSE-SU-2017:2235-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 11 sp43.29.5-47.3.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefoxrpmlinux enterprise point of sale 11 sp352.2.0esr-72.5.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise point of sale 11 sp352-24.3.44Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-gcc5rpmlinux enterprise point of sale 11 sp35.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-libffi-gcc5rpmlinux enterprise point of sale 11 sp35.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susemozilla-nssrpmlinux enterprise point of sale 11 sp33.29.5-47.3.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp3-ltss52.2.0esr-72.5.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server 11 sp3-ltss52-24.3.44Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-gcc5rpmlinux enterprise server 11 sp3-ltss5.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-libffi-gcc5rpmlinux enterprise server 11 sp3-ltss5.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp3-ltss3.29.5-47.3.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp3-teradata52.2.0esr-72.5.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server 11 sp3-teradata52-24.3.44Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-gcc5rpmlinux enterprise server 11 sp3-teradata5.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-libffi-gcc5rpmlinux enterprise server 11 sp3-teradata5.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp3-teradata3.29.5-47.3.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp452.2.0esr-72.5.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server 11 sp452-24.3.44Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-gcc5rpmlinux enterprise server 11 sp45.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-libffi-gcc5rpmlinux enterprise server 11 sp45.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp43.29.5-47.3.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 11 sp452.2.0esr-72.5.2Not reportedSUSE-SU-2017:2235-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server for sap applications 11 sp452-24.3.44Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-gcc5rpmlinux enterprise server for sap applications 11 sp45.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susefirefox-libffi-gcc5rpmlinux enterprise server for sap applications 11 sp45.3.1+r233831-7.1Not reportedSUSE-SU-2017:2235-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 11 sp43.29.5-47.3.2Not reportedSUSE-SU-2017:2235-1Not reported
Susegcc48rpmlinux enterprise desktop 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Suselibgcj48rpmlinux enterprise desktop 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Susegcc48rpmlinux enterprise software development kit 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Suselibffi48rpmlinux enterprise software development kit 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Suselibgcj48rpmlinux enterprise software development kit 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Susegcc48rpmlinux enterprise server 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Suselibffi48rpmlinux enterprise server 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Susegcc48rpmlinux enterprise server for sap applications 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Suselibffi48rpmlinux enterprise server for sap applications 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Suselibgcj48rpmlinux enterprise workstation extension 124.8.5-24.1Not reportedSUSE-SU-2015:1833-1Not reported
Opensusegcc5rpmtumbleweed5.4.1+r240125-1.5Not reportedOPENSUSE-SU-2024:10542-1Not reported
Susegcc5rpmlinux enterprise desktop 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise desktop 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise desktop 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise desktop 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise module for toolchain 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise module for toolchain 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise software development kit 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise server 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise server 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise server for sap applications 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise server for sap applications 125.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise server 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise server 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc5rpmlinux enterprise server for sap applications 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Suselibffi-gcc5rpmlinux enterprise server for sap applications 12 sp15.3.1+r233831-9.1Not reportedSUSE-SU-2016:0963-1Not reported
Susegcc48rpmlinux enterprise software development kit 11 sp44.8.5-4.2Not reportedSUSE-SU-2017:0379-1Not reported
Susegcc5rpmlinux enterprise software development kit 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported
Suselibffi-gcc5rpmlinux enterprise software development kit 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported
Susegcc5rpmlinux enterprise desktop 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported
Susegcc5rpmlinux enterprise server 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported
Suselibffi-gcc5rpmlinux enterprise server 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported
Susegcc5rpmlinux enterprise server for sap applications 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported
Suselibffi-gcc5rpmlinux enterprise server for sap applications 11 sp45.3.1+r233831-10.1Not reportedSUSE-SU-2016:0908-2Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References