Published: 02/09/2019 Updated: 17/09/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu gcc
opensuse leap 15.0
opensuse leap 15.1

Synopsis Moderate: gcc security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for gcc is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score ...

Synopsis Moderate: devtoolset-8-gcc security update Type/Severity Security Advisory: Moderate Topic An update for devtoolset-8-gcc is now available for Red Hat Developer Toolset 8 for Red Hat Enterprise LinuxRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vu ...

Synopsis Moderate: devtoolset-9-gcc security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for devtoolset-9-gcc is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scor ...

Synopsis Important: Container-native Virtualization security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Virtualization release 240 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Securi ...

Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...

Impact: Moderate Public Date: 2019-09-02 CWE: CWE-331 Bugzilla: 1755523: CVE-2019-15847 gcc: POWER9 "DA ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-331 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91481 http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2020:1864 https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10 https://access.redhat.com/security/cve/cve-2019-15847

CVE-2019-15847

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect