AZL-28769 CVE-2023-4039 affecting package gcc for versions less than 11.2.0-6

🗓️ 13 Sep 2023 09:15:15Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Disputed GCC stack-protector flaw on AArch64 may allow overflow in dynamically sized locals, risking availability.

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: Order Management is subject to various OS vulnerabilites which could have allowed attacker various entry points into application.	29 Apr 202502:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.1 has addressed security vulnerabilities	26 Dec 202321:15	–	ibm
Tenable Nessus	Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-342)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gcc10 (ALAS-2023-2244)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gcc (ALAS-2023-2245)	13 Sep 202300:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: gcc (CVE-2023-4039)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : gcc (EulerOS-SA-2023-3174)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : gcc (EulerOS-SA-2023-3209)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : gcc (EulerOS-SA-2023-3296)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : gcc (EulerOS-SA-2023-3328)	16 Jan 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-4039

21 Apr 2026 04:25Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.14.8

EPSS0.00185