Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2015-5276
HistoryNov 17, 2015 - 3:59 p.m.

CVE-2015-5276

2015-11-1715:59:04
CWE-200
redhat
web.nvd.nist.gov
46
cve-2015-5276
gnu compiler collection
libstdc++
security vulnerability
random values
short reads
context-dependent attackers
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.2%

JSON

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Affected configurations

Nvd
Node
gnugccRange<4.9.4
VendorProductVersionCPE
gnugcc*cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*

Related

nessus 12
openvas 9
prion 1
ubuntucve 1
nvd 1
cvelist 1
mageia 1
osv 1
ibm 2
suse 3
nessus
nessus
openSUSE Security Update : gcc5 (openSUSE-2016-472)
2016-04-18 00:00:00
SUSE SLED12 / SLES12 Security Update : gcc48 (SUSE-SU-2015:1833-1)
2015-10-29 00:00:00
SUSE SLED12 / SLES12 Security Update : gcc5 (SUSE-SU-2016:0963-1)
2016-04-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2020-1383)
2020-04-16 00:00:00
Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2019-1461)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2015-0449)
2015-11-23 00:00:00
prion
prion
Design/Logic Flaw
2015-11-17 15:59:00
ubuntucve
ubuntucve
CVE-2015-5276
2015-11-17 00:00:00
nvd
nvd
CVE-2015-5276
2015-11-17 15:59:04
cvelist
cvelist
CVE-2015-5276
2015-11-17 15:00:00
mageia
mageia
Updated gcc packages fix security vulnerability
2015-11-20 01:08:19
osv
osv
cpp5-5.4.1+r240125-1.5 on GA media
2024-06-15 00:00:00
ibm
ibm
Security Bulletin: Security Vulnerabilities in OpenSSL, glibc, gcc, Net-SNMP, and OpenSSH affect IBM Security Proventia Network Enterprise Scanner
2018-06-16 21:41:08
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs
2023-03-08 18:05:21
suse
suse
Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss (important)
2017-08-22 21:08:17
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.2%

JSON
Related for CVE-2015-5276
nessus12openvas9prion1ubuntucve1nvd1cvelist1mageia1osv1ibm2suse3