Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2019-15847

Published: 2 September 2019

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Notes

AuthorNote
mdeslaur
this is part of the power9 ISA, and Ubuntu binaries are built
with the power8 ISA, so no binaries in the archive are affected

setting priority to negligible
eslerm
instruction set implementation for POWER9 began in gcc-6
affected darn instruction set implemented on 2016-06-02
which predates gcc-6.1.0

Priority

Negligible

Cvss 3 Severity Score

7.5

Score breakdown

Status

Package Release Status
gcc-10
Launchpad, Ubuntu, Debian
bionic Does not exist

focal
Released (10.2.0-5ubuntu1~20.04)
groovy Not vulnerable
(10.2.0-13ubuntu1)
hirsute Not vulnerable
(10.2.0-13ubuntu1)
impish Not vulnerable
(10.2.0-13ubuntu1)
jammy Not vulnerable
(10.2.0-13ubuntu1)
kinetic Not vulnerable
(10.2.0-13ubuntu1)
lunar Not vulnerable
(10.2.0-13ubuntu1)
mantic Not vulnerable
(10.2.0-13ubuntu1)
noble Not vulnerable
(10.2.0-13ubuntu1)
trusty Does not exist

upstream
Released (10.1.0)
xenial Does not exist

Patches:
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=e99bfdd2a8db732ea84cf0a6486707e5e821ad7e
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=457dac402027dd7e14543fbd59a75858422cf6c6










gcc-3.3
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(predates power9)
disco Not vulnerable
(predates power9)
eoan Not vulnerable
(predates power9)
focal Not vulnerable
(predates power9)
groovy Not vulnerable
(predates power9)
hirsute Not vulnerable
(predates power9)
impish Not vulnerable
(predates power9)
jammy Not vulnerable
(predates power9)
kinetic Not vulnerable
(predates power9)
lunar Not vulnerable
(predates power9)
mantic Not vulnerable
(predates power9)
noble Not vulnerable
(predates power9)
trusty Not vulnerable
(predates power9)
upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-4.4
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Does not exist

gcc-4.6
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Does not exist

gcc-4.7
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(predates power9)
upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-4.7-armel-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-4.7-armhf-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-4.8
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(predates power9)
disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(predates power9)
upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-4.8-arm64-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-5
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(predates power9)
disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-5-cross
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(predates power9)
disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(predates power9)
xenial Not vulnerable
(predates power9)
gcc-6
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life, was needs-triage)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-6-cross
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-6-cross-ports
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-7
Launchpad, Ubuntu, Debian
bionic
Released (7.5.0-3ubuntu1~18.04)
disco Ignored
(end of life)
eoan
Released (7.4.0-12ubuntu2)
focal Not vulnerable
(7.4.0-12ubuntu2)
groovy Not vulnerable
(7.4.0-12ubuntu2)
hirsute Not vulnerable
(7.4.0-12ubuntu2)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (7.5.0)
xenial Does not exist

Patches:


upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=d08d1afd311b0d17cb140e449026ba76a29c4417
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=7b382b64cb6f355f3fb501998d2e3f130f474613
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=3ae1245ec8fd234fc3f2d0ce1723309728897ee3
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=a93bc7cc307b30b863ecf2b585b597814c8532f6






gcc-7-cross
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-7-cross-ports
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-8
Launchpad, Ubuntu, Debian
bionic
Released (8.3.0-26ubuntu1~18.04)
disco Ignored
(end of life)
eoan Not vulnerable
(8.3.0-22ubuntu1)
focal Not vulnerable
(8.3.0-22ubuntu1)
groovy Not vulnerable
(8.3.0-22ubuntu1)
hirsute Not vulnerable
(8.3.0-22ubuntu1)
impish Not vulnerable
(8.3.0-22ubuntu1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (8.4.0)
xenial Does not exist

Patches:






upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=8358562298cf72905c128c2c96526b7fdccf742c
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=c2894790640da2c0761924ff1b06efddbdfa031e
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=ff12f8b9ae10bf7270ec7ead28a479f6105058eb
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=710d6269e1d93d6da1fdf2952f746e35a0a02365


gcc-8-cross
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needs triage

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-8-cross-ports
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needs triage

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-9
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Ignored
(end of life)
eoan Not vulnerable
(9.2.1-9ubuntu2)
focal Not vulnerable
(9.2.1-28ubuntu1)
groovy Not vulnerable
(9.2.1-28ubuntu1)
hirsute Not vulnerable
(9.2.1-28ubuntu1)
impish Not vulnerable
(9.2.1-28ubuntu1)
jammy Not vulnerable
(9.2.1-28ubuntu1)
kinetic Not vulnerable
(9.2.1-28ubuntu1)
lunar Not vulnerable
(9.2.1-28ubuntu1)
mantic Not vulnerable
(9.2.1-28ubuntu1)
noble Not vulnerable
(9.2.1-28ubuntu1)
trusty Does not exist

upstream
Released (9.3.0)
xenial Does not exist

Patches:










upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=dc2b6f50dde5cfca855b68ca6149109bb338e23b
upstream: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=5233accf7784e1defdf1d0f7fe45732f9999d471
gcc-9-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needs triage

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Needs triage

kinetic Ignored
(end of life, was needs-triage)
lunar Ignored
(end of life, was needs-triage)
mantic Needs triage

noble Needs triage

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-9-cross-ports
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needs triage

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Needs triage

kinetic Ignored
(end of life, was needs-triage)
lunar Ignored
(end of life, was needs-triage)
mantic Needs triage

noble Needs triage

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-arm-linux-androideabi
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(power9 only)
gcc-arm-none-eabi
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(power9 only)
disco Not vulnerable
(power9 only)
eoan Not vulnerable
(power9 only)
focal Not vulnerable
(power9 only)
groovy Not vulnerable
(power9 only)
hirsute Not vulnerable
(power9 only)
impish Not vulnerable
(power9 only)
jammy Not vulnerable
(power9 only)
kinetic Not vulnerable
(power9 only)
lunar Not vulnerable
(power9 only)
mantic Not vulnerable
(power9 only)
noble Not vulnerable
(power9 only)
trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(power9 only)
gcc-avr
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(power9 only)
disco Not vulnerable
(power9 only)
eoan Not vulnerable
(power9 only)
focal Not vulnerable
(power9 only)
groovy Not vulnerable
(power9 only)
hirsute Not vulnerable
(power9 only)
impish Not vulnerable
(power9 only)
jammy Not vulnerable
(power9 only)
kinetic Not vulnerable
(power9 only)
lunar Not vulnerable
(power9 only)
mantic Not vulnerable
(power9 only)
noble Not vulnerable
(power9 only)
trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(power9 only)
gcc-defaults
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needs triage

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Needs triage

kinetic Ignored
(end of life, was needs-triage)
lunar Ignored
(end of life, was needs-triage)
mantic Needs triage

noble Needs triage

trusty Not vulnerable
(predates power9)
upstream Needs triage

xenial Not vulnerable
(predates gcc-6.1.0)
gcc-defaults-arm64-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-armel-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-armhf-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-powerpc-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-defaults-ppc64el-cross
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

gcc-h8300-hms
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(power9 only)
disco Not vulnerable
(power9 only)
eoan Not vulnerable
(power9 only)
focal Not vulnerable
(power9 only)
groovy Not vulnerable
(power9 only)
hirsute Not vulnerable
(power9 only)
impish Not vulnerable
(power9 only)
jammy Not vulnerable
(power9 only)
kinetic Not vulnerable
(power9 only)
lunar Not vulnerable
(power9 only)
mantic Not vulnerable
(power9 only)
noble Not vulnerable
(power9 only)
trusty Does not exist

upstream Not vulnerable
(power9 only)
xenial Not vulnerable
(power9 only)
gcc-i686-linux-android
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(power9 only)
gcc-m68hc1x
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(power9 only)
disco Not vulnerable
(power9 only)
eoan Not vulnerable
(power9 only)
focal Not vulnerable
(power9 only)
groovy Not vulnerable
(power9 only)
hirsute Not vulnerable
(power9 only)
impish Not vulnerable
(power9 only)
jammy Not vulnerable
(power9 only)
kinetic Not vulnerable
(power9 only)
lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Not vulnerable
(power9 only)
xenial Not vulnerable
(power9 only)
gcc-mingw-w64
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(power9 only)
disco Not vulnerable
(power9 only)
eoan Not vulnerable
(power9 only)
focal Not vulnerable
(power9 only)
groovy Not vulnerable
(power9 only)
hirsute Not vulnerable
(power9 only)
impish Not vulnerable
(power9 only)
jammy Not vulnerable
(power9 only)
kinetic Not vulnerable
(power9 only)
lunar Not vulnerable
(power9 only)
mantic Not vulnerable
(power9 only)
noble Not vulnerable
(power9 only)
trusty Not vulnerable
(power9 only)
upstream Not vulnerable
(power9 only)
xenial Not vulnerable
(power9 only)
gcc-msp430
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(power9 only)
disco Not vulnerable
(power9 only)
eoan Not vulnerable
(power9 only)
focal Not vulnerable
(power9 only)
groovy Not vulnerable
(power9 only)
hirsute Not vulnerable
(power9 only)
impish Not vulnerable
(power9 only)
jammy Not vulnerable
(power9 only)
kinetic Not vulnerable
(power9 only)
lunar Not vulnerable
(power9 only)
mantic Not vulnerable
(power9 only)
noble Does not exist

trusty Does not exist

upstream Not vulnerable
(power9 only)
xenial Not vulnerable
(power9 only)
gcc-opt
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
disco Not vulnerable
(code not present)
eoan Not vulnerable
(code not present)
focal Not vulnerable
(code not present)
groovy Not vulnerable
(code not present)
hirsute Not vulnerable
(code not present)
impish Not vulnerable
(code not present)
jammy Not vulnerable
(code not present)
kinetic Not vulnerable
(code not present)
lunar Not vulnerable
(code not present)
mantic Not vulnerable
(code not present)
noble Not vulnerable
(code not present)
trusty Does not exist

upstream Not vulnerable
(code not present)
xenial Not vulnerable
(code not present)
gcc-snapshot
Launchpad, Ubuntu, Debian
bionic Needs triage

disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needs triage

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy Needs triage

kinetic Ignored
(end of life, was needs-triage)
lunar Ignored
(end of life, was needs-triage)
mantic Needs triage

noble Needs triage

trusty Does not exist

upstream Needs triage

xenial Needs triage

gccgo-4.9
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(predates power9)
upstream Not vulnerable
(predates power9)
xenial Does not exist

gccgo-6
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream Needs triage

xenial Not vulnerable
(predates gcc-6.1.0)

Severity score breakdown

Parameter Value
Base score 7.5
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact None
Availability impact None
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N