GNU gcc 4.9.4

CPE Details

GNU gcc 4.9.4
4.9.4
2019-03-05
17h06 +00:00
2019-03-05
17h06 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:gnu:gcc:4.9.4:*:*:*:*:*:*:*

Informations

Vendor

gnu

Product

gcc

Version

4.9.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-37322 2021-11-18 20h11 +00:00 GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
7.8
High
CVE-2019-15847 2019-09-02 20h03 +00:00 The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
7.5
High
CVE-2018-12886 2019-05-22 16h42 +00:00 stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
8.1
High