Oval Definition:	oval:com.ubuntu.bionic:def:201711671000
Revision Date: 2017-07-26 Version: 1 Title: CVE-2017-11671 on Ubuntu 18.04 LTS (bionic) - low. Description: Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-11671 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information The vulnerability of the 'gcc-3.3' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-4.8' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-5' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-5-cross' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-6' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-6-cross' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-6-cross-ports' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-7' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-7-cross' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-7-cross-ports' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-arm-none-eabi' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-avr' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-defaults' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-h8300-hms' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-m68hc1x' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-mingw-w64' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-msp430' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-opt' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gcc-snapshot' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
BACK