Search CVE reports

Toggle filters

1 – 10 of 14 results

CVE-2023-4039

Low priority

Some fixes available 27 of 218

**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this...

65 affected packages

gcc-3.3, gcc-4.4, gcc-4.6, gcc-4.7, gcc-4.8...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-3.3 Not affected Not affected Not affected Not affected
gcc-4.4 Not in release Not in release Not in release Not in release
gcc-4.6 Not in release Not in release Not in release Not in release
gcc-4.7 Not in release Not in release Not in release Not in release
gcc-4.8 Not in release Not in release Not in release Needs evaluation
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-5 Not in release Not in release Not in release Needs evaluation
gcc-6 Not in release Not in release Not in release Needs evaluation
gcc-7 Not in release Not in release Needs evaluation Needs evaluation
gcc-8 Not in release Not in release Needs evaluation Needs evaluation
gcc-9 Fixed Needs evaluation Needs evaluation Not in release
gcc-10 Fixed Needs evaluation Needs evaluation Not in release
gcc-11 Fixed Vulnerable Not in release Not in release
gcc-12 Fixed Vulnerable Not in release Not in release
gcc-13 Fixed Not in release Not in release Not in release
gcc-4.9-cross Not in release Not in release Not in release Ignored
gcc-5-cross Not in release Not in release Not in release Needs evaluation
gcc-5-cross-ports Not in release Not in release Not in release Needs evaluation
gcc-6-cross Not in release Not in release Not in release Needs evaluation
gcc-6-cross-ports Not in release Not in release Not in release Needs evaluation
gcc-7-cross Not in release Not in release Not in release Needs evaluation
gcc-7-cross-ports Not in release Not in release Not in release Needs evaluation
gcc-8-cross Not in release Not in release Needs evaluation Needs evaluation
gcc-8-cross-ports Not in release Not in release Needs evaluation Needs evaluation
gcc-9-cross Fixed Needs evaluation Needs evaluation Not in release
gcc-9-cross-mipsen Needs evaluation Needs evaluation Needs evaluation Not in release
gcc-9-cross-ports Needs evaluation Needs evaluation Needs evaluation Not in release
gcc-10-cross Fixed Needs evaluation Needs evaluation Not in release
gcc-10-cross-mipsen Needs evaluation Needs evaluation Needs evaluation Not in release
gcc-10-cross-ports Needs evaluation Needs evaluation Needs evaluation Not in release
gcc-11-cross Fixed Vulnerable Not in release Not in release
gcc-11-cross-mipsen Needs evaluation Not in release Not in release Not in release
gcc-11-cross-ports Needs evaluation Needs evaluation Not in release Not in release
gcc-12-cross Fixed Vulnerable Not in release Not in release
gcc-12-cross-mipsen Needs evaluation Not in release Not in release Not in release
gcc-12-cross-ports Needs evaluation Needs evaluation Not in release Not in release
gcc-13-cross Not affected Not in release Not in release Not in release
gcc-13-cross-ports Fixed Not in release Not in release Not in release
gcc-or1k-elf Needs evaluation Needs evaluation Not in release Ignored
gcc-riscv64-unknown-elf Needs evaluation Needs evaluation Needs evaluation Ignored
gcc-xtensa-lx106 Not in release Needs evaluation Needs evaluation Ignored
gcc-snapshot Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-i686-linux-android Not in release Not in release Not in release Not in release
gcc-4.7-armel-cross Not in release Not in release Not in release Not in release
gcc-4.7-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-arm64-cross Not in release Not in release Not in release Not in release
gcc-4.8-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-powerpc-cross Not in release Not in release Not in release Not in release
gcc-4.8-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-arm-linux-androideabi Not in release Not in release Not in release Not in release
gcc-arm-none-eabi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-avr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-defaults Not affected Not affected Not affected Not affected
gcc-defaults-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-armel-cross Not in release Not in release Not in release Not in release
gcc-defaults-armhf-cross Not in release Not in release Not in release Not in release
gcc-defaults-powerpc-cross Not in release Not in release Not in release Not in release
gcc-defaults-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-h8300-hms Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-m68hc1x Not in release Needs evaluation Needs evaluation Needs evaluation
gcc-mingw-w64 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-msp430 Not in release Needs evaluation Needs evaluation Needs evaluation
gcc-opt Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gccgo-4.9 Not in release Not in release Not in release Not in release
gccgo-6 Not in release Not in release Not in release Not in release
Show all 65 packages Show less packages

CVE-2022-27943

Low priority
Vulnerable

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

52 affected packages

gcc-10, gcc-4.7-armel-cross, gcc-4.7-armhf-cross, gcc-4.8-arm64-cross, gcc-4.8-armhf-cross...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-10 Not affected Not affected Not affected Not in release
gcc-4.7-armel-cross Not in release Not in release Not in release Not in release
gcc-4.7-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-arm64-cross Not in release Not in release Not in release Not in release
gcc-4.8-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-powerpc-cross Not in release Not in release Not in release Not in release
gcc-4.8-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-5-cross Not in release Not in release Not in release Not affected
gcc-6-cross Not in release Not in release Not in release Not affected
gcc-6-cross-ports Not in release Not in release Not in release Not affected
gcc-7-cross Not in release Not in release Not in release Needs evaluation
gcc-7-cross-ports Not in release Not in release Not in release Needs evaluation
gcc-8 Not in release Not in release Not affected Not affected
gcc-8-cross Not in release Not in release Needs evaluation Needs evaluation
gcc-8-cross-ports Not in release Not in release Not affected Not affected
gcc-arm-linux-androideabi Not in release Not in release Not in release Not in release
gcc-defaults-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-armel-cross Not in release Not in release Not in release Not in release
gcc-defaults-armhf-cross Not in release Not in release Not in release Not in release
gcc-i686-linux-android Not in release Not in release Not in release Not in release
gcc-3.3 Not affected Not affected Not affected Not affected
gcc-4.4 Not in release Not in release Not in release Not in release
gcc-4.6 Not in release Not in release Not in release Not in release
gcc-4.7 Not in release Not in release Not in release Not in release
gcc-4.8 Not in release Not in release Not in release Not affected
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-5 Not in release Not in release Not in release Not affected
gcc-6 Not in release Not in release Not in release Not affected
gcc-7 Not in release Not in release Not affected Not affected
gcc-9 Not affected Not affected Not affected Not in release
gcc-11 Vulnerable Vulnerable Not in release Not in release
gcc-9-cross Not affected Not affected Not affected Not in release
gcc-9-cross-ports Not affected Not affected Not affected Not in release
gcc-snapshot Not affected Needs evaluation Needs evaluation Not affected
gcc-arm-none-eabi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-avr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-defaults Not affected Not affected Not affected Not affected
crash Not affected Not affected Not affected Not affected
gdb Not affected Vulnerable Not affected Not affected
gcc-12 Vulnerable Vulnerable Not in release Not in release
gcc-13 Not affected Not in release Not in release Not in release
binutils Not affected Vulnerable Not affected Not affected
gcc-defaults-powerpc-cross Not in release Not in release Not in release Not in release
gcc-defaults-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-h8300-hms Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-m68hc1x Not in release Needs evaluation Needs evaluation Needs evaluation
gcc-mingw-w64 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-msp430 Not in release Needs evaluation Needs evaluation Needs evaluation
gcc-opt Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gccgo-4.9 Not in release Not in release Not in release Not in release
gccgo-6 Not in release Not in release Not in release Not in release
libiberty Not affected Vulnerable Not affected Not affected
Show all 52 packages Show less packages

CVE-2021-46195

Low priority
Vulnerable

GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.

48 affected packages

gcc-10, gcc-3.3, gcc-4.6, gcc-11, gcc-4.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-10 Not affected Not affected Not affected Not in release
gcc-3.3 Not affected Not affected Not affected Not affected
gcc-4.6 Not in release Not in release Not in release Not in release
gcc-11 Vulnerable Vulnerable Not in release Not in release
gcc-4.4 Not in release Not in release Not in release Not in release
gcc-4.7 Not in release Not in release Not in release Not in release
gcc-4.7-armel-cross Not in release Not in release Not in release Not in release
gcc-4.7-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8 Not in release Not in release Not in release Not affected
gcc-4.8-arm64-cross Not in release Not in release Not in release Not in release
gcc-4.8-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-powerpc-cross Not in release Not in release Not in release Not in release
gcc-4.8-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-5 Not in release Not in release Not in release Not affected
gcc-5-cross Not in release Not in release Not in release Not affected
gcc-6 Not in release Not in release Not in release Not affected
gcc-6-cross Not in release Not in release Not in release Not affected
gcc-6-cross-ports Not in release Not in release Not in release Not affected
gcc-7 Not in release Not in release Not affected Not affected
gcc-7-cross Not in release Not in release Not in release Not affected
gcc-8 Not in release Not in release Not affected Not affected
gcc-7-cross-ports Not in release Not in release Not in release Not affected
gcc-8-cross Not in release Not in release Not affected Not affected
gcc-8-cross-ports Not in release Not in release Not affected Not affected
gcc-9 Not affected Not affected Not affected Not in release
gcc-9-cross Not affected Not affected Not affected Not in release
gcc-9-cross-ports Not affected Not affected Not affected Not in release
gcc-arm-none-eabi Not affected Not affected Not affected Not affected
gcc-arm-linux-androideabi Not in release Not in release Not in release Not in release
gcc-avr Not affected Not affected Not affected Not affected
gcc-defaults Not affected Not affected Not affected Not affected
gcc-defaults-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-armel-cross Not in release Not in release Not in release Not in release
gcc-defaults-armhf-cross Not in release Not in release Not in release Not in release
gcc-defaults-powerpc-cross Not in release Not in release Not in release Not in release
gcc-defaults-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-h8300-hms Not affected Not affected Not affected Not affected
gcc-i686-linux-android Not in release Not in release Not in release Not in release
gcc-m68hc1x Not in release Not affected Not affected Not affected
gcc-mingw-w64 Not affected Not affected Not affected Not affected
gcc-msp430 Not in release Not affected Not affected Not affected
gcc-opt Not affected Not affected Not affected Not affected
gcc-snapshot Not affected Not affected Not affected Not affected
gccgo-4.9 Not in release Not in release Not in release Not in release
gccgo-6 Not in release Not in release Not in release Not in release
gcc-12 Not affected Not affected Not in release Ignored
gcc-13 Not affected Not in release Not in release Ignored
Show all 48 packages Show less packages

CVE-2021-3826

Low priority
Vulnerable

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

51 affected packages

gcc-10, gcc-11, gcc-4.4, gcc-4.6, gcc-4.7...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-10 Not affected Not affected Not affected Not in release
gcc-11 Vulnerable Vulnerable Not in release Not in release
gcc-4.4 Not in release Not in release Not in release Not in release
gcc-4.6 Not in release Not in release Not in release Not in release
gcc-4.7 Not in release Not in release Not in release Not in release
gcc-4.7-armel-cross Not in release Not in release Not in release Not in release
gcc-4.7-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8 Not in release Not in release Not in release Not affected
gcc-4.8-arm64-cross Not in release Not in release Not in release Not in release
gcc-4.8-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-powerpc-cross Not in release Not in release Not in release Not in release
gcc-4.8-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-5 Not in release Not in release Not in release Not affected
gcc-5-cross Not in release Not in release Not in release Not affected
gcc-6 Not in release Not in release Not in release Not affected
gcc-6-cross Not in release Not in release Not in release Not affected
gcc-6-cross-ports Not in release Not in release Not in release Not affected
gcc-7 Not in release Not in release Not affected Not affected
gcc-7-cross Not in release Not in release Not in release Not affected
gcc-7-cross-ports Not in release Not in release Not in release Not affected
gcc-8 Not in release Not in release Not affected Not affected
gcc-8-cross Not in release Not in release Not affected Not affected
gcc-8-cross-ports Not in release Not in release Not affected Not affected
gcc-9 Not affected Not affected Not affected Not in release
gcc-9-cross Not affected Not affected Not affected Not in release
gcc-9-cross-ports Not affected Not affected Not affected Not in release
gcc-arm-linux-androideabi Not in release Not in release Not in release Not in release
gcc-arm-none-eabi Not affected Not affected Not affected Not affected
gcc-avr Not affected Not affected Not affected Not affected
gcc-defaults Not affected Not affected Not affected Not affected
gcc-defaults-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-armel-cross Not in release Not in release Not in release Not in release
gcc-defaults-armhf-cross Not in release Not in release Not in release Not in release
gcc-defaults-powerpc-cross Not in release Not in release Not in release Not in release
gcc-defaults-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-h8300-hms Not affected Not affected Not affected Not affected
gcc-i686-linux-android Not in release Not in release Not in release Not in release
gcc-m68hc1x Not in release Not affected Not affected Not affected
gcc-mingw-w64 Not affected Not affected Not affected Not affected
gcc-msp430 Not in release Not affected Not affected Not affected
gcc-opt Not affected Not affected Not affected Not affected
gcc-snapshot Not affected Not affected Not affected Not affected
gccgo-4.9 Not in release Not in release Not in release Not in release
gccgo-6 Not in release Not in release Not in release Not in release
gcc-3.3 Not affected Not affected Not affected Not affected
gcc-12 Not affected Not affected Not in release Ignored
gcc-13 Not affected Not in release Not in release Ignored
libiberty Not affected Vulnerable Not affected Not affected
gdb Not affected Not affected Not affected Needs evaluation
binutils Not affected Not affected Not affected Not affected
Show all 51 packages Show less packages

CVE-2020-35537

Low priority
Ignored

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

46 affected packages

gcc-10, gcc-11, gcc-3.3, gcc-9, gcc-9-cross...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-10 — Not affected Not affected Not in release
gcc-11 — Not affected Not in release Not in release
gcc-3.3 — Not affected Not affected Not affected
gcc-9 — Not affected Not affected Not in release
gcc-9-cross — Not affected Not affected Not in release
gcc-9-cross-ports — Not affected Not affected Not in release
gcc-arm-none-eabi — Not affected Not affected Not affected
gcc-avr — Not affected Not affected Not affected
gcc-h8300-hms — Not affected Not affected Not affected
gcc-m68hc1x — Not affected Not affected Not affected
gcc-mingw-w64 — Not affected Not affected Not affected
gcc-msp430 — Not affected Not affected Not affected
gcc-opt — Not affected Not affected Not affected
gcc-snapshot — Not affected Not affected Not affected
gcc-4.8 — Not in release Not in release Not affected
gcc-4.4 — Not in release Not in release Not in release
gcc-4.6 — Not in release Not in release Not in release
gcc-4.7 — Not in release Not in release Not in release
gcc-4.7-armel-cross — Not in release Not in release Not in release
gcc-4.7-armhf-cross — Not in release Not in release Not in release
gcc-4.8-arm64-cross — Not in release Not in release Not in release
gcc-4.8-armhf-cross — Not in release Not in release Not in release
gcc-4.8-powerpc-cross — Not in release Not in release Not in release
gcc-4.8-ppc64el-cross — Not in release Not in release Not in release
gcc-4.9 — Not in release Not in release Not in release
gcc-5 — Not in release Not in release Not affected
gcc-5-cross — Not in release Not in release Not affected
gcc-6 — Not in release Not in release Not affected
gcc-6-cross — Not in release Not in release Not affected
gcc-6-cross-ports — Not in release Not in release Not affected
gcc-7 — Not in release Not affected Not affected
gcc-7-cross — Not in release Not in release Not affected
gcc-7-cross-ports — Not in release Not in release Not affected
gcc-8 — Not in release Not affected Not affected
gcc-8-cross — Not in release Not affected Not affected
gcc-8-cross-ports — Not in release Not affected Not affected
gcc-arm-linux-androideabi — Not in release Not in release Not in release
gcc-defaults — Not affected Not affected Not affected
gcc-defaults-arm64-cross — Not in release Not in release Not in release
gcc-defaults-armel-cross — Not in release Not in release Not in release
gcc-defaults-armhf-cross — Not in release Not in release Not in release
gcc-defaults-powerpc-cross — Not in release Not in release Not in release
gcc-defaults-ppc64el-cross — Not in release Not in release Not in release
gcc-i686-linux-android — Not in release Not in release Not in release
gccgo-4.9 — Not in release Not in release Not in release
gccgo-6 — Not in release Not in release Not in release
Show all 46 packages Show less packages

CVE-2020-35536

Negligible priority
Ignored

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

46 affected packages

gcc-8, gcc-3.3, gcc-9, gcc-9-cross, gcc-9-cross-ports...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-8 — Not in release Not affected Not affected
gcc-3.3 — Not affected Not affected Not affected
gcc-9 — Not affected Not affected Not in release
gcc-9-cross — Not affected Not affected Not in release
gcc-9-cross-ports — Not affected Not affected Not in release
gcc-arm-none-eabi — Not affected Not affected Not affected
gcc-avr — Not affected Not affected Not affected
gcc-h8300-hms — Not affected Not affected Not affected
gcc-m68hc1x — Not affected Not affected Not affected
gcc-mingw-w64 — Not affected Not affected Not affected
gcc-msp430 — Not affected Not affected Not affected
gcc-opt — Not affected Not affected Not affected
gcc-snapshot — Not affected Not affected Not affected
gcc-10 — Not affected Not affected Not in release
gcc-11 — Not affected Not in release Not in release
gcc-4.4 — Not in release Not in release Not in release
gcc-4.6 — Not in release Not in release Not in release
gcc-4.7 — Not in release Not in release Not in release
gcc-4.7-armel-cross — Not in release Not in release Not in release
gcc-4.7-armhf-cross — Not in release Not in release Not in release
gcc-4.8 — Not in release Not in release Not affected
gcc-4.8-arm64-cross — Not in release Not in release Not in release
gcc-4.8-armhf-cross — Not in release Not in release Not in release
gcc-4.8-powerpc-cross — Not in release Not in release Not in release
gcc-4.8-ppc64el-cross — Not in release Not in release Not in release
gcc-4.9 — Not in release Not in release Not in release
gcc-5 — Not in release Not in release Not affected
gcc-5-cross — Not in release Not in release Not affected
gcc-6 — Not in release Not in release Not affected
gcc-6-cross — Not in release Not in release Not affected
gcc-6-cross-ports — Not in release Not in release Not affected
gcc-7 — Not in release Not affected Not affected
gcc-7-cross — Not in release Not in release Not affected
gcc-7-cross-ports — Not in release Not in release Not affected
gcc-8-cross — Not in release Not affected Not affected
gcc-8-cross-ports — Not in release Not affected Not affected
gcc-arm-linux-androideabi — Not in release Not in release Not in release
gcc-defaults — Not affected Not affected Not affected
gcc-defaults-arm64-cross — Not in release Not in release Not in release
gcc-defaults-armel-cross — Not in release Not in release Not in release
gcc-defaults-armhf-cross — Not in release Not in release Not in release
gcc-defaults-powerpc-cross — Not in release Not in release Not in release
gcc-defaults-ppc64el-cross — Not in release Not in release Not in release
gcc-i686-linux-android — Not in release Not in release Not in release
gccgo-4.9 — Not in release Not in release Not in release
gccgo-6 — Not in release Not in release Not in release
Show all 46 packages Show less packages

CVE-2020-23026

Low priority
Ignored

A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).

45 affected packages

gcc-3.3, gcc-4.8, gcc-5, gcc-5-cross, gcc-4.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-3.3 — Ignored Ignored Ignored
gcc-4.8 — Not in release Not in release Ignored
gcc-5 — Not in release Not in release Ignored
gcc-5-cross — Not in release Not in release Ignored
gcc-4.4 — Not in release Not in release Not in release
gcc-4.7-armel-cross — Not in release Not in release Not in release
gcc-4.7-armhf-cross — Not in release Not in release Not in release
gcc-h8300-hms — Ignored Ignored Ignored
gcc-m68hc1x — Ignored Ignored Ignored
gcc-mingw-w64 — Ignored Ignored Ignored
gcc-7 — Not in release Ignored Ignored
gcc-8 — Not in release Ignored Ignored
gcc-8-cross — Not in release Ignored Ignored
gcc-8-cross-ports — Not in release Ignored Ignored
gcc-9 — Ignored Ignored Not in release
gcc-9-cross — Ignored Ignored Not in release
gcc-9-cross-ports — Ignored Ignored Not in release
gcc-arm-none-eabi — Ignored Ignored Ignored
gcc-avr — Ignored Ignored Ignored
gcc-defaults — Ignored Ignored Ignored
gcc-4.7 — Not in release Not in release Not in release
gcc-4.8-arm64-cross — Not in release Not in release Not in release
gcc-4.8-armhf-cross — Not in release Not in release Not in release
gcc-4.8-powerpc-cross — Not in release Not in release Not in release
gcc-4.8-ppc64el-cross — Not in release Not in release Not in release
gcc-4.9 — Not in release Not in release Not in release
gcc-4.6 — Not in release Not in release Not in release
gcc-6 — Not in release Not in release Ignored
gcc-6-cross — Not in release Not in release Ignored
gcc-6-cross-ports — Not in release Not in release Ignored
gcc-7-cross — Not in release Not in release Ignored
gcc-7-cross-ports — Not in release Not in release Ignored
gcc-arm-linux-androideabi — Not in release Not in release Not in release
gcc-defaults-arm64-cross — Not in release Not in release Not in release
gcc-defaults-armel-cross — Not in release Not in release Not in release
gcc-defaults-armhf-cross — Not in release Not in release Not in release
gcc-defaults-powerpc-cross — Not in release Not in release Not in release
gcc-defaults-ppc64el-cross — Not in release Not in release Not in release
gcc-i686-linux-android — Not in release Not in release Not in release
gcc-msp430 — Ignored Ignored Ignored
gcc-opt — Ignored Ignored Ignored
gcc-snapshot — Ignored Ignored Ignored
gccgo-4.9 — Not in release Not in release Not in release
gccgo-6 — Not in release Not in release Not in release
u-boot — Not affected Not affected Not affected
Show all 45 packages Show less packages

CVE-2020-13844

Medium priority

Some fixes available 3 of 205

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka...

54 affected packages

gcc-7, gcc-8, gcc-8-cross, gcc-8-cross-ports, gcc-9...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-7 Not in release Not in release Vulnerable Vulnerable
gcc-8 Not in release Not in release Vulnerable Vulnerable
gcc-8-cross Not in release Not in release Vulnerable Vulnerable
gcc-8-cross-ports Not in release Not in release Vulnerable Vulnerable
gcc-9 Not affected Not affected Fixed Not in release
gcc-9-cross Not affected Not affected Fixed Not in release
gcc-9-cross-ports Vulnerable Vulnerable Vulnerable Not in release
gcc-arm-none-eabi Vulnerable Vulnerable Vulnerable Vulnerable
gcc-avr Vulnerable Vulnerable Vulnerable Vulnerable
gcc-defaults Not affected Not affected Not affected Not affected
gcc-h8300-hms Vulnerable Vulnerable Vulnerable Vulnerable
gcc-m68hc1x Not in release Vulnerable Vulnerable Vulnerable
gcc-mingw-w64 Vulnerable Vulnerable Vulnerable Vulnerable
gcc-msp430 Not in release Vulnerable Vulnerable Vulnerable
gcc-opt Vulnerable Vulnerable Vulnerable Vulnerable
gcc-snapshot Vulnerable Vulnerable Vulnerable Vulnerable
gcc-3.3 Vulnerable Vulnerable Vulnerable Vulnerable
gcc-4.4 Not in release Not in release Not in release Not in release
gcc-4.6 Not in release Not in release Not in release Not in release
gcc-4.7-armel-cross Not in release Not in release Not in release Not in release
gcc-4.7-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-armel-cross Not in release Not in release Not in release Not in release
llvm-toolchain-3.3 Not in release Not in release Not in release Not in release
llvm-toolchain-3.4 Not in release Not in release Not in release Not in release
llvm-toolchain-3.5 Not in release Not in release Not in release Not in release
gcc-10 Not affected Not affected Fixed Not in release
gcc-4.7 Not in release Not in release Not in release Not in release
gcc-4.8 Not in release Not in release Not in release Vulnerable
gcc-5 Not in release Not in release Not in release Not affected
gcc-5-cross Not in release Not in release Not in release Vulnerable
gcc-6 Not in release Not in release Not in release Vulnerable
gcc-6-cross Not in release Not in release Not in release Vulnerable
gcc-6-cross-ports Not in release Not in release Not in release Vulnerable
gcc-7-cross Not in release Not in release Not in release Vulnerable
gcc-4.8-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-powerpc-cross Not in release Not in release Not in release Not in release
gcc-4.8-ppc64el-cross Not in release Not in release Not in release Not in release
gccgo-4.9 Not in release Not in release Not in release Not in release
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-7-cross-ports Not in release Not in release Not in release Vulnerable
gcc-arm-linux-androideabi Not in release Not in release Not in release Not in release
gcc-defaults-armhf-cross Not in release Not in release Not in release Not in release
gcc-defaults-powerpc-cross Not in release Not in release Not in release Not in release
gccgo-6 Not in release Not in release Not in release Not in release
gcc-defaults-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-i686-linux-android Not in release Not in release Not in release Not in release
llvm-toolchain-3.6 Not in release Not in release Not in release Not in release
llvm-toolchain-3.7 Not in release Not in release Not in release Vulnerable
llvm-toolchain-3.8 Not in release Not in release Not in release Not in release
llvm-toolchain-3.9 Not in release Not in release Not in release Vulnerable
llvm-toolchain-4.0 Not in release Not in release Not in release Vulnerable
llvm-toolchain-snapshot Not in release Not in release Not in release Not in release
Show all 54 packages Show less packages

CVE-2019-15847

Negligible priority

Some fixes available 4 of 69

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This...

45 affected packages

gcc-6, gcc-5, gcc-5-cross, gcc-6-cross, gcc-4.7-armel-cross...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-6 Not in release Not in release Not in release Needs evaluation
gcc-5 Not in release Not in release Not in release Not affected
gcc-5-cross Not in release Not in release Not in release Not affected
gcc-6-cross Not in release Not in release Not in release Needs evaluation
gcc-4.7-armel-cross Not in release Not in release Not in release Not in release
gcc-4.7-armhf-cross Not in release Not in release Not in release Not in release
gcc-defaults-armel-cross Not in release Not in release Not in release Not in release
gcc-defaults-armhf-cross Not in release Not in release Not in release Not in release
gcc-8-cross Not in release Not in release Needs evaluation Needs evaluation
gcc-8-cross-ports Not in release Not in release Needs evaluation Needs evaluation
gcc-9-cross Not affected Not affected Not affected Not in release
gcc-9-cross-ports Needs evaluation Needs evaluation Needs evaluation Not in release
gcc-defaults Not affected Not affected Not affected Not affected
gcc-snapshot Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-h8300-hms Not affected Not affected Not affected Not affected
gcc-avr Not affected Not affected Not affected Not affected
gcc-7 Not in release Not in release Not affected Fixed
gcc-8 Not in release Not in release Not affected Fixed
gcc-9 Not affected Not affected Not affected Not in release
gcc-arm-linux-androideabi Not in release Not in release Not in release Not in release
gcc-arm-none-eabi Not affected Not affected Not affected Not affected
gcc-i686-linux-android Not in release Not in release Not in release Not in release
gcc-m68hc1x Not in release Not affected Not affected Not affected
gcc-mingw-w64 Not affected Not affected Not affected Not affected
gcc-msp430 Not in release Not affected Not affected Not affected
gcc-opt Not affected Not affected Not affected Not affected
gcc-10 Not affected Not affected Fixed Not in release
gcc-3.3 Not affected Not affected Not affected Not affected
gcc-4.4 Not in release Not in release Not in release Not in release
gcc-4.6 Not in release Not in release Not in release Not in release
gcc-4.7 Not in release Not in release Not in release Not in release
gcc-4.8 Not in release Not in release Not in release Not affected
gcc-4.8-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-4.8-armhf-cross Not in release Not in release Not in release Not in release
gcc-4.8-powerpc-cross Not in release Not in release Not in release Not in release
gcc-4.8-ppc64el-cross Not in release Not in release Not in release Not in release
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-6-cross-ports Not in release Not in release Not in release Needs evaluation
gcc-7-cross Not in release Not in release Not in release Needs evaluation
gcc-7-cross-ports Not in release Not in release Not in release Needs evaluation
gcc-defaults-arm64-cross Not in release Not in release Not in release Not in release
gcc-defaults-powerpc-cross Not in release Not in release Not in release Not in release
gccgo-4.9 Not in release Not in release Not in release Not in release
gccgo-6 Not in release Not in release Not in release Not in release
Show all 45 packages Show less packages

CVE-2018-12886

Low priority
Vulnerable

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the...

12 affected packages

gcc-6, gcc-7, gcc-snapshot, gcc-4.8, gcc-4.9...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-6 Not in release Not in release Not in release Vulnerable
gcc-7 Not in release Not in release Needs evaluation Vulnerable
gcc-snapshot Needs evaluation Needs evaluation Not affected Vulnerable
gcc-4.8 Not in release Not in release Not in release Needs evaluation
gcc-4.9 Not in release Not in release Not in release Not in release
gcc-arm-none-eabi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gcc-avr Not affected Not affected Not affected Not affected
gcc-h8300-hms Not affected Not affected Not affected Not affected
gcc-m68hc1x Not in release Not affected Not affected Not affected
gcc-msp430 Not in release Not affected Not affected Not affected
gcc-9 Not affected Not affected Not affected Not in release
gcc-8 Not in release Not in release Needs evaluation Needs evaluation
Show all 12 packages Show less packages
  1. Previous page
  2. 1
  3. 2
  4. Next page
Export to JSON