CVE-2019-15847

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Information

Published : 2019-09-02 16:15

Updated : 2020-09-17 06:38


NVD link : CVE-2019-15847

Mitre link : CVE-2019-15847


JSON object : View

CWE
CWE-331

Insufficient Entropy

Advertisement

dedicated server usa

Products Affected

gnu

  • gcc

opensuse

  • leap