CVE-2019-15847

🗓️ 02 Sep 2019 22:03:34Reported by mitreType

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
AlpineLinux	CVE-2019-15847	2 Sep 201922:03	–	alpinelinux
CBLMariner	CVE-2019-15847 affecting package gcc 9.1.0-7	8 Oct 202018:09	–	cbl_mariner
Cvelist	CVE-2019-15847	2 Sep 201922:03	–	cvelist
Debian CVE	CVE-2019-15847	2 Sep 201922:03	–	debiancve
Oracle linux	gcc security and bug fix update	5 May 202000:00	–	oraclelinux
Tenable Nessus	EulerOS 2.0 SP8 : gcc (EulerOS-SA-2019-2073)	30 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : gcc (EulerOS-SA-2019-2308)	3 Dec 201900:00	–	nessus
Tenable Nessus	GLSA-202409-22 : GCC: Flawed Code Generation	24 Sep 202400:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gcc-8.3.1-5.el8 (AXSA:2020-362:02)	20 Jan 202600:00	–	nessus

NVD

Node

gnu gccRange<7.5.0

gnu gccRange8.0–8.4.0

gnu gccRange9.0–9.3.0

gnu gccRange10.0–10.1.0

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html
gcc	www.gcc.gnu.org/bugzilla/show_bug.cgi
lists	www.lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html

21 Nov 2024 04:29Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.17.5

EPSS0.00537

CWE-331