CVE-2015-5276

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources…

published November 17, 2015

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02941 · 87.0th percentile
Published
2015-11-17T15:00Z
EPSS history
Timeline
  • 17 NOV 15:00Z
    The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources…
    cvelistv5