Oval Definition:oval:com.ubuntu.cosmic:def:201552760000000
Revision Date:2015-11-17Version:1
Title:CVE-2015-5276 on Ubuntu 18.10 (cosmic) - low.
Description:The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-5276
Platform(s):Ubuntu 18.10
Product(s):
Definition Synopsis
  • Ubuntu 18.10 (cosmic) is installed.
  • AND Package Information
  • gcc-4.8: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
  • OR gcc-arm-none-eabi package in cosmic, is related to the CVE in some way and has been fixed (note: '15:6.3.1+svn253039').
  • OR gcc-avr package in cosmic, is related to the CVE in some way and has been fixed (note: '1:5.4.0+Amtel3.6.0-1build1').
  • OR gcc-mingw-w64 package in cosmic, is related to the CVE in some way and has been fixed (note: '17').
  • OR gcc-msp430: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
  • OR gcc-snapshot package in cosmic, is related to the CVE in some way and has been fixed (note: '20151011-0ubuntu1').
    • BACK