CVE-2015-5276: Exposure of Sensitive Information to an Unauthorized Actor

The std::randomdevice class in libstdc++ in the GNU Compiler Collection aka GCC before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors...

PT-2015-6827

Name of the Vulnerable Software and Affected Versions GNU Compiler Collection GCC versions prior to 4.9.4 Description The issue concerns the std::random device class in libstdc++ which does not handle short reads from blocking sources properly. This makes it easier for attackers to predict random...

GNU GCC Local Integer Overflow Vulnerability

GCC GNU Compiler Collection, GNU Compiler Suite is a set of compilers developed by GNU Engineering that supports a wide range of programming languages. A native integer overflow vulnerability exists in GNU GCC. Allowing an attacker to execute arbitrary code in the context of an application. A...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the gcc-java-3.2.3 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Scientific Linux Security Update : boost on SL5.x i386/x86_64 (20120221)

The boost packages provide free, peer-reviewed, portable C++ source libraries with emphasis on libraries which work well with the C++ Standard Library. Invalid pointer dereference flaws were found in the way the Boost regular expression library processed certain, invalid expressions. An attacker...

VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates

The remote ESXi is missing one or more security related Updates from VMSA-2010-0009. Summary ESXi update for ntp and ESX Console OS COS updates for COS kernel, openssl, krb5, gcc, bind, gzip, sudo. Relevant releases VMware ESXi 4.0.0 without patch ESXi400-201005401-SG VMware ESX 4.0.0 without...

GCC 4.6.3 Released with 70 bug-fixes

GCC 4.6.3 Released with 70 bug-fixes The GNU Compiler Collection version 4.6.3 has been released. Jakub Jelinek of Red Hat announced the release this morning of GCC 4.6.3. Over GCC 4.6.2 there's over 70 bug-fixes and other work. However, all of the exciting work meanwhile is going into what will...

RHEL 5 : boost (RHSA-2012:0305)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0305 advisory. The boost packages provide free, peer-reviewed, portable C++ source libraries with emphasis on libraries which work well with the C++ Standa...

Fedora Update for gcc FEDORA-2010-10640

Check for the Version of gcc OpenVAS Vulnerability Test Fedora Update for gcc FEDORA-2010-10640 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 12 Update: gcc-4.4.4-10.fc12

The gcc package contains the GNU Compiler Collection version 4.4. You'll need this package in order to compile C code...

Fedora Update for gcc FEDORA-2010-10415

Check for the Version of gcc OpenVAS Vulnerability Test Fedora Update for gcc FEDORA-2010-10415 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for kernel RHSA-2008:0508-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0508-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CentOS Update for kernel CESA-2008:0211 centos3 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0211 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Kernel doesn't clear DF for signal handlers

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...

CVE-2008-1685

gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer...

CVE-2008-1685

gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer...

CVE-2008-1685

CVE-2008-1685 affects GNU Compiler Collection versions 4.2.0–4.3.0. The issue is that when casts are not used, the sum of a pointer and an int may be considered >= the pointer, which can lead to removal of length-testing code intended as protection against integer overflow and buffer overflow,...

CVE-2008-1685: Improper Restriction of Operations within the Bounds of a Memory Buffer

gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer...

PT-2008-1164 · Gnu · Gnu Compiler Collection

Name of the Vulnerable Software and Affected Versions: GNU Compiler Collection versions 4.2.0 through 4.3.0 Description: The issue is related to the incorrect handling of the sum of a pointer and an integer as greater than or equal to the pointer without using casts. This might lead to the remova...

DEBIAN-CVE-2008-1367

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag DF from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signa...