USN-5770-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-5770-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5770-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-5770-1
Upstream
Related
Published
2022-12-08T20:18:42.720311Z
Modified
2025-10-13T04:36:10Z
Summary
gcc-5, gccgo-6 vulnerability
Details

Todd Eisenberger discovered that certain versions of GNU Compiler Collection (GCC) could be made to clobber the status flag of RDRAND and RDSEED with specially crafted input. This could potentially lead to less randomness in random number generation.

References

Affected packages

Ubuntu:Pro:16.04:LTS / gcc-5

Package

Name
gcc-5
Purl
pkg:deb/ubuntu/gcc-5@5.4.0-6ubuntu1~16.04.12+esm2?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.0-6ubuntu1~16.04.12+esm2

Affected versions

5.*

5.2.1-22ubuntu2
5.2.1-22ubuntu5
5.2.1-23ubuntu1
5.2.1-26ubuntu1
5.2.1-27ubuntu1
5.3.1-2ubuntu2
5.3.1-3ubuntu1
5.3.1-3ubuntu3
5.3.1-4ubuntu1
5.3.1-5ubuntu1
5.3.1-5ubuntu2
5.3.1-5ubuntu3
5.3.1-6ubuntu1
5.3.1-6ubuntu2
5.3.1-7ubuntu1
5.3.1-8ubuntu2
5.3.1-8ubuntu3
5.3.1-9ubuntu3
5.3.1-10ubuntu2
5.3.1-11ubuntu1
5.3.1-12ubuntu1
5.3.1-12ubuntu2
5.3.1-12ubuntu4
5.3.1-13ubuntu1
5.3.1-13ubuntu3
5.3.1-13ubuntu4
5.3.1-13ubuntu6
5.3.1-14ubuntu2
5.3.1-14ubuntu2.1
5.4.0-6ubuntu1~16.04.1
5.4.0-6ubuntu1~16.04.2
5.4.0-6ubuntu1~16.04.4
5.4.0-6ubuntu1~16.04.5
5.4.0-6ubuntu1~16.04.6
5.4.0-6ubuntu1~16.04.9
5.4.0-6ubuntu1~16.04.10
5.4.0-6ubuntu1~16.04.11
5.4.0-6ubuntu1~16.04.12

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "cpp-5"
        },
        {
            "binary_version": "1:5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "fixincludes"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "g++-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "g++-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-base"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-hppa64-linux-gnu"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-locales"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-plugin-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-source"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcc-5-test-results"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gccgo-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gccgo-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcj-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcj-5-jdk"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcj-5-jre"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcj-5-jre-headless"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcj-5-jre-lib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gcj-5-source"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gdc-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gdc-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gfortran-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gfortran-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gnat-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gnat-5-sjlj"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gobjc++-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gobjc++-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gobjc-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "gobjc-5-multilib"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32asan2"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32atomic1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32cilkrts5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32gcc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32gfortran-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32gfortran3"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32go7"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32gomp1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32itm1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32lsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32mpx0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32objc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32objc4"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32phobos-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32quadmath0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32stdc++-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32stdc++6"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib32ubsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64asan2"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64atomic1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64cilkrts5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64gcc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64gfortran-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64gfortran3"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64go7"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64gomp1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64itm1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64mpx0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64objc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64objc4"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64phobos-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64quadmath0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64stdc++-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64stdc++6"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "lib64ubsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libasan2"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libatomic1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libcc1-0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libcilkrts5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgcc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgccjit-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgccjit0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgcj16"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgcj16-awt"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgcj16-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgfortran-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgfortran3"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgnat-5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgnatprj5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgnatprj5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgnatvsn5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgnatvsn5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgo7"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libgomp1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libitm1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "liblsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libmpx0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libobjc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libobjc4"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libphobos-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libquadmath0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfasan2"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfatomic1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfgcc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfgfortran-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfgfortran3"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfgomp1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfobjc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfobjc4"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfphobos-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfstdc++-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfstdc++6"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libsfubsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libstdc++-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libstdc++-5-pic"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libstdc++6"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libtsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libubsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32asan2"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32atomic1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32cilkrts5"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32gcc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32gfortran-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32gfortran3"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32go7"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32gomp1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32itm1"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32lsan0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32objc-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32objc4"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32phobos-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32quadmath0"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32stdc++-5-dev"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32stdc++6"
        },
        {
            "binary_version": "5.4.0-6ubuntu1~16.04.12+esm2",
            "binary_name": "libx32ubsan0"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:16.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                    "type": "CVSS_V3"
                },
                {
                    "score": "low",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2017-11671"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / gccgo-6

Package

Name
gccgo-6
Purl
pkg:deb/ubuntu/gccgo-6@6.0.1-0ubuntu1+esm1?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.0.1-0ubuntu1+esm1

Affected versions

Other

6-20160210-0ubuntu2
6-20160217-0ubuntu1
6-20160220-0ubuntu1
6-20160225-0ubuntu1
6-20160225-0ubuntu2
6-20160227-0ubuntu1
6-20160313-0ubuntu1
6-20160319-0ubuntu1
6-20160405-0ubuntu1
6-20160405-0ubuntu2

6.*

6.0.1-0ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "gcc-6-base"
        },
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "gccgo-6"
        },
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "gccgo-6-multilib"
        },
        {
            "binary_version": "1:6.0.1-0ubuntu1+esm1",
            "binary_name": "lib32gcc1"
        },
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "lib32go9"
        },
        {
            "binary_version": "1:6.0.1-0ubuntu1+esm1",
            "binary_name": "lib64gcc1"
        },
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "lib64go9"
        },
        {
            "binary_version": "1:6.0.1-0ubuntu1+esm1",
            "binary_name": "libgcc1"
        },
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "libgo9"
        },
        {
            "binary_version": "1:6.0.1-0ubuntu1+esm1",
            "binary_name": "libsfgcc1"
        },
        {
            "binary_version": "1:6.0.1-0ubuntu1+esm1",
            "binary_name": "libx32gcc1"
        },
        {
            "binary_version": "6.0.1-0ubuntu1+esm1",
            "binary_name": "libx32go9"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:Pro:16.04:LTS",
    "cves": [
        {
            "severity": [
                {
                    "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                    "type": "CVSS_V3"
                },
                {
                    "score": "low",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2017-11671"
        }
    ]
}