CVE-2017-11671

Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.

CVSS v3 4.0 MEDIUM
CVSS v2.0 2.1 LOW

4.0^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://openwall.com/lists/oss-security/2017/07/27/2	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/100018	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:0849
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180	Issue Tracking Vendor Advisory
https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html	Mailing List

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gnu:gcc:4.6:::::::*
	cpe:2.3:a:gnu:gcc:4.7:::::::*
	cpe:2.3:a:gnu:gcc:4.8:::::::*
	cpe:2.3:a:gnu:gcc:4.9:::::::*
	cpe:2.3:a:gnu:gcc:5.0:::::::*
	cpe:2.3:a:gnu:gcc:5.1:::::::*
	cpe:2.3:a:gnu:gcc:5.2:::::::*
	cpe:2.3:a:gnu:gcc:5.3:::::::*
	cpe:2.3:a:gnu:gcc:5.4:::::::*
	cpe:2.3:a:gnu:gcc:6.0:::::::*
	cpe:2.3:a:gnu:gcc:6.1:::::::*
	cpe:2.3:a:gnu:gcc:6.2:::::::*
	cpe:2.3:a:gnu:gcc:6.3:::::::*

History

No history.

Information

Published : 2017-07-26 21:29

Updated : 2023-12-10 12:15

NVD link : CVE-2017-11671

Mitre link : CVE-2017-11671

CVE.ORG link : CVE-2017-11671

JSON object : View

Products Affected

gnu

gcc

CWE

CWE-338

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

{"id": "CVE-2017-11671", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.5}]}, "published": "2017-07-26T21:29:00.207", "references": [{"url": "http://openwall.com/lists/oss-security/2017/07/27/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/100018", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://access.redhat.com/errata/RHSA-2018:0849", "source": "cve@mitre.org"}, {"url": "https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80180", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://gcc.gnu.org/ml/gcc-patches/2017-03/msg01349.html", "tags": ["Mailing List"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-338"}]}], "descriptions": [{"lang": "en", "value": "Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation."}, {"lang": "es", "value": "Bajo ciertas circunstancias, la funci\u00f3n ix86_expand_builtin en el archivo i386.c en GNU Compiler Collection (GCC) versiones 4.6, 4.7, 4.8, 4.9, versi\u00f3n 5 anterior a 5.5 y versi\u00f3n 6 anterior a 6.4, generar\u00e1 secuencias de instrucciones que marcar\u00e1n el flag status de los intr\u00ednsecos RDRAND y RDSEED antes de que se pueda leer, es posible que no se denuncien los fallos de estas instrucciones. Esto podr\u00eda potencialmente conllevar a una menor aleatoriedad en la generaci\u00f3n de n\u00fameros aleatorios."}], "lastModified": "2018-04-12T01:29:01.660", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gnu:gcc:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "432D419B-7C47-432B-90CC-CBAD7112FD1F"}, {"criteria": "cpe:2.3:a:gnu:gcc:4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B01EDC85-552A-47B3-9801-99E6D033884E"}, {"criteria": "cpe:2.3:a:gnu:gcc:4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B242A15-371A-4FB7-9515-46DDA6E07C82"}, {"criteria": "cpe:2.3:a:gnu:gcc:4.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1DDA9FF-4383-4E66-8945-41BB25C6C04E"}, {"criteria": "cpe:2.3:a:gnu:gcc:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C86C936-3E2E-4E89-A3A4-3E77EF1AE761"}, {"criteria": "cpe:2.3:a:gnu:gcc:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DF2D5BD-B28C-43A2-A990-21F5ECB1C570"}, {"criteria": "cpe:2.3:a:gnu:gcc:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D100A33-D544-4613-893B-5BBA013DB2D3"}, {"criteria": "cpe:2.3:a:gnu:gcc:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1EE4B8E-1E82-415D-950D-13750B99E081"}, {"criteria": "cpe:2.3:a:gnu:gcc:5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57D66615-998F-4FDA-A1E2-E203E95D55DF"}, {"criteria": "cpe:2.3:a:gnu:gcc:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D812A692-BBCE-469F-9EA3-DFC0C43B347C"}, {"criteria": "cpe:2.3:a:gnu:gcc:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54A4004B-67A0-4677-BC78-3019B14E3C75"}, {"criteria": "cpe:2.3:a:gnu:gcc:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC6A4748-7738-4259-9B4A-D013CFCCA7F8"}, {"criteria": "cpe:2.3:a:gnu:gcc:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CD09C4A-59C9-4852-BF74-BAF72F4EDA4E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}