Every CVE Search/ Get API key

CVE-2015-5276

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4...

5.0 MediumFix available

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Exploit likelihood

2.94%Up 1.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Record
CVE-2015-5276
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Record
CVE-2015-5276
Updated
2026-11-02
EUVDEUVD-2015-5255 No score

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Record
EUVD-2015-5255
Updated
2026-11-03
GitHub AdvisoriesGHSA-rq8f-f9q7-5x24 No score

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4...

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Record
GHSA-rq8f-f9q7-5x24
Weakness
CWE-200
Updated
2026-11-02
OSVMGASA-2015-0449 No score

Updated gcc packages fix security vulnerability

It was discovered that the std::random_device class in libstdc++ would not properly detect short reads and could return predictable values if applications used it to obtain randomness from a blocking source such as /dev/random. (CVE-2015-5276)

Record
MGASA-2015-0449
Updated
2026-11-02
OSVopenSUSE-SU-2024:10542-1 No score

cpp5-5.4.1+r240125-1.5 on GA media

These are all security issues fixed in the cpp5-5.4.1+r240125-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10542-1
Updated
2026-11-02
Show 8 moreShow less
OSVSUSE-SU-2015:1833-1 No score

Security update for gcc48

This update for GCC 4.8 provides the following fixes:

  • Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842)
  • Fix linker segmentation fault when building SLOF on ppc64le. (bsc#949000)
  • Fix no_instrument_function attribute handling on PPC64 with -mprofile-kernel. (bsc#947791)
  • Fix internal compiler error with aarch64 target using PCH and builtin functions. (bsc#947772)
  • Fix libffi issues on aarch64. (bsc#948168)
Record
SUSE-SU-2015:1833-1
Updated
2026-11-02
OSVSUSE-SU-2016:0908-2 No score

Security update for gcc5

The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements.

The following security issue has been fixed:

  • Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842)

The following non-security issues have been fixed:

  • Enable frame pointer for TARGET_64BIT_MS_ABI when stack is misaligned. Fixes internal compiler error when building Wine. (bsc#966220)
  • Fix a PowerPC specific issue in gcc-go that broke compilation of newer versions of Docker. (bsc#964468)
  • Fix HTM built-ins on PowerPC. (bsc#955382)
  • Fix libgo certificate lookup. (bsc#953831)
  • Suppress deprecated-declarations warnings for inline definitions of deprecated virtual methods. (bsc#939460)
  • Revert accidental libffi ABI breakage on aarch64. (bsc#968771)
  • On x86_64, set default 32bit code generation to -march=x86-64 rather than -march=i586.
  • Add experimental File System TS library.
Record
SUSE-SU-2016:0908-2
Updated
2026-11-02
OSVSUSE-SU-2016:0963-1 No score

Security update for gcc5

The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements.

The following security issue has been fixed:

  • Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842)

The following non-security issues have been fixed:

  • Enable frame pointer for TARGET_64BIT_MS_ABI when stack is misaligned. Fixes internal compiler error when building Wine. (bsc#966220)
  • Fix a PowerPC specific issue in gcc-go that broke compilation of newer versions of Docker. (bsc#964468)
  • Fix HTM built-ins on PowerPC. (bsc#955382)
  • Fix libgo certificate lookup. (bsc#953831)
  • Suppress deprecated-declarations warnings for inline definitions of deprecated virtual methods. (bsc#939460)
  • Build s390[x] with '--with-tune=z9-109 --with-arch=z900' on SLE11 again. (bsc#954002)
  • Revert accidental libffi ABI breakage on aarch64. (bsc#968771)
  • On x86_64, set default 32bit code generation to -march=x86-64 rather than -march=i586.
  • Add experimental File System TS library.
Record
SUSE-SU-2016:0963-1
Updated
2026-11-02
OSVSUSE-SU-2017:0379-1 No score

Security update for gcc48

This update for gcc48 to version 4.8.5 fixes several issues.

This security issue was fixed:

  • CVE-2015-5276: The std::random_device class in libstdc++ did not properly handle short reads from blocking sources, which made it easier for context-dependent attackers to predict the random values via unspecified vectors (bsc#945842).

These non-security issues were fixed:

  • Provide missing libasan0-32bit and other multilibs via the updated product description [bsc#951644]
  • Fixed libffi issue for armv7l [bsc#988274]
  • Fixed libffi issue for armv7l [bsc#988274]
  • Fixed a kernel miscompile on aarch64 [bnc#981311]
  • Fixed a ppc64le ICE. [bnc#976627]
  • Fixed issue with using gcov and #pragma pack [bsc#977654]
  • Fixed samba build on AARCH64 [bsc#970009]
  • Fixed HTM builtins on powerpc [bsc#955382]
  • Fixed build of SLOF [bsc#949000]
  • Fixed libffi issues on aarch64 [bsc#948168]
  • Fixed no_instrument_function attribute handling on PPC64 with -mprofile-kernel [bsc#947791]
  • Fixed bogus integer overflow in constant expression [bsc#934689]
  • Fixed ICE with atomics on aarch64 [bsc#930176]
  • Fixed -imacros bug [bsc#917169]
  • Fixed incorrect -Warray-bounds warnings [bsc#919274]
  • Updated -mhotpatch for s390x [bsc#924525]
  • Fixed ppc64le issue with doubleword vector extract [bsc#924687]
  • Fixed reload issue on S390.
  • Keep functions leaf when they are instrumented for profiling on s390[x] [bsc#899871]
  • Avoid accessing invalid memory when passing aggregates by value [bsc#922534]
  • Rework of the memory allocator for C++ exceptions used in OOM situations [bsc#889990]
Record
SUSE-SU-2017:0379-1
Updated
2026-11-02
OSVSUSE-SU-2017:2235-1 No score

Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss

This update for MozillaFirefox and mozilla-nss fixes the following issues:

Security issues fixed:

  • Fixes in Firefox ESR 52.2 (bsc#1043960,MFSA 2017-16)

    • CVE-2017-7758: Out-of-bounds read in Opus encoder
    • CVE-2017-7749: Use-after-free during docshell reloading
    • CVE-2017-7751: Use-after-free with content viewer listeners
    • CVE-2017-5472: Use-after-free using destroyed node when regenerating trees
    • CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
    • CVE-2017-7752: Use-after-free with IME input
    • CVE-2017-7750: Use-after-free with track elements
    • CVE-2017-7768: 32 byte arbitrary file read through Mozilla Maintenance Service
    • CVE-2017-7778: Vulnerabilities in the Graphite 2 library
    • CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object
    • CVE-2017-7755: Privilege escalation through Firefox Installer with same directory DLL files
    • CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors
    • CVE-2017-7757: Use-after-free in IndexedDB
    • CVE-2017-7761: File deletion and privilege escalation through Mozilla Maintenance Service helper.exe application
    • CVE-2017-7763: Mac fonts render some unicode characters as spaces
    • CVE-2017-7765: Mark of the Web bypass when saving executable files
    • CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks

  • update to Firefox ESR 52.1 (bsc#1035082,MFSA 2017-12)

    • CVE-2016-10196: Vulnerabilities in Libevent library
    • CVE-2017-5443: Out-of-bounds write during BinHex decoding
    • CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1
    • CVE-2017-5464: Memory corruption with accessibility and DOM manipulation
    • CVE-2017-5465: Out-of-bounds read in ConvolvePixel
    • CVE-2017-5466: Origin confusion when reloading isolated data:text/html URL
    • CVE-2017-5467: Memory corruption when drawing Skia content
    • CVE-2017-5460: Use-after-free in frame selection
    • CVE-2017-5461: Out-of-bounds write in Base64 encoding in NSS
    • CVE-2017-5448: Out-of-bounds write in ClearKeyDecryptor
    • CVE-2017-5449: Crash during bidirectional unicode manipulation with animation
    • CVE-2017-5446: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
    • CVE-2017-5447: Out-of-bounds read during glyph processing
    • CVE-2017-5444: Buffer overflow while parsing application/http-index-format content
    • CVE-2017-5445: Uninitialized values used while parsing application/http- index-format content
    • CVE-2017-5442: Use-after-free during style changes
    • CVE-2017-5469: Potential Buffer overflow in flex-generated code
    • CVE-2017-5440: Use-after-free in txExecutionState destructor during XSLT processing
    • CVE-2017-5441: Use-after-free with selection during scroll events
    • CVE-2017-5439: Use-after-free in nsTArray Length() during XSLT processing
    • CVE-2017-5438: Use-after-free in nsAutoPtr during XSLT processing
    • CVE-2017-5436: Out-of-bounds write with malicious font in Graphite 2
    • CVE-2017-5435: Use-after-free during transaction processing in the editor
    • CVE-2017-5434: Use-after-free during focus handling
    • CVE-2017-5433: Use-after-free in SMIL animation functions
    • CVE-2017-5432: Use-after-free in text input selection
    • CVE-2017-5430: Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
    • CVE-2017-5459: Buffer overflow in WebGL
    • CVE-2017-5462: DRBG flaw in NSS
    • CVE-2017-5455: Sandbox escape through internal feed reader APIs
    • CVE-2017-5454: Sandbox escape allowing file system read access through file picker
    • CVE-2017-5456: Sandbox escape allowing local file system access
    • CVE-2017-5451: Addressbar spoofing with onblur event

  • General

    • CVE-2015-5276: Fix for C++11 std::random_device short reads (bsc#945842)

Bugfixes:

  • workaround for Firefox hangs (bsc#1031485, bsc#1025108)
  • Update to gcc-5-branch head.
    • Includes fixes for (bsc#966220), (bsc#962765), (bsc#964468), (bsc#939460), …
Record
SUSE-SU-2017:2235-1
Updated
2026-11-02
OSVSUSE-SU-2017:2699-1 No score

Security update for SLES 12 Docker image

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

util-linux:

  • CVE-2015-5218
  • CVE-2016-5011
  • CVE-2017-2616

cracklib:

  • CVE-2016-6318

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • openldap2
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • shadow
  • zypper
Record
SUSE-SU-2017:2699-1
Updated
2026-11-02
OSVSUSE-SU-2017:2700-1 No score

Security update for SLES 12-SP1 Docker image

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

expat:

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306
  • CVE-2016-7056
  • CVE-2016-8610
  • CVE-2017-3731

cracklib:

  • CVE-2016-6318

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

util-linux:

  • CVE-2016-5011
  • CVE-2017-2616

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

update-alternatives:

  • CVE-2015-0860

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • lua51
  • lvm2
  • netcfg
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • sg3_utils
  • shadow
  • zypper
Record
SUSE-SU-2017:2700-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-5276 No score

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Record
UBUNTU-CVE-2015-5276
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gcc
Mageia:5
 before 4.9.2-4.1.mga5
4.9.2-4.1.mga5
gcc48
SUSE:Linux Enterprise Desktop 12
 before 4.8.5-24.1
4.8.5-24.1
libgcj48
SUSE:Linux Enterprise Desktop 12
 before 4.8.5-24.1
4.8.5-24.1
gcc48
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.5-24.1
4.8.5-24.1
libffi48
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.5-24.1
4.8.5-24.1
libgcj48
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.5-24.1
4.8.5-24.1
gcc48
SUSE:Linux Enterprise Server 12
 before 4.8.5-24.1
4.8.5-24.1
libffi48
SUSE:Linux Enterprise Server 12
 before 4.8.5-24.1
4.8.5-24.1
gcc48
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.5-24.1
4.8.5-24.1
libffi48
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.5-24.1
4.8.5-24.1
Show 72 moreShow less
Affected packages
PackageAffectedFixed
libgcj48
SUSE:Linux Enterprise Workstation Extension 12
 before 4.8.5-24.1
4.8.5-24.1
gcc5
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
libffi-gcc5
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
gcc5
SUSE:Linux Enterprise Desktop 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
gcc5
SUSE:Linux Enterprise Server 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
libffi-gcc5
SUSE:Linux Enterprise Server 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
gcc5
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
libffi-gcc5
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 5.3.1+r233831-10.1
5.3.1+r233831-10.1
gcc5
SUSE:Linux Enterprise Desktop 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Desktop 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Desktop 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Desktop 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Module for Toolchain 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Module for Toolchain 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Server 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Server 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Server for SAP Applications 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Server for SAP Applications 12
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Server 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Server 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc5
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
libffi-gcc5
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 5.3.1+r233831-9.1
5.3.1+r233831-9.1
gcc48
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 4.8.5-4.2
4.8.5-4.2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 52.2.0esr-72.5.2
52.2.0esr-72.5.2
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 3.29.5-47.3.2
3.29.5-47.3.2
MozillaFirefox
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 52.2.0esr-72.5.2
52.2.0esr-72.5.2
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 52-24.3.44
52-24.3.44
firefox-gcc5
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
firefox-libffi-gcc5
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
mozilla-nss
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 3.29.5-47.3.2
3.29.5-47.3.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 52.2.0esr-72.5.2
52.2.0esr-72.5.2
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 52-24.3.44
52-24.3.44
firefox-gcc5
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
firefox-libffi-gcc5
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
mozilla-nss
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 3.29.5-47.3.2
3.29.5-47.3.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 52.2.0esr-72.5.2
52.2.0esr-72.5.2
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 52-24.3.44
52-24.3.44
firefox-gcc5
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
firefox-libffi-gcc5
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
mozilla-nss
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 3.29.5-47.3.2
3.29.5-47.3.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4
 before 52.2.0esr-72.5.2
52.2.0esr-72.5.2
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP4
 before 52-24.3.44
52-24.3.44
firefox-gcc5
SUSE:Linux Enterprise Server 11 SP4
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
firefox-libffi-gcc5
SUSE:Linux Enterprise Server 11 SP4
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
mozilla-nss
SUSE:Linux Enterprise Server 11 SP4
 before 3.29.5-47.3.2
3.29.5-47.3.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 52.2.0esr-72.5.2
52.2.0esr-72.5.2
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 52-24.3.44
52-24.3.44
firefox-gcc5
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
firefox-libffi-gcc5
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 5.3.1+r233831-7.1
5.3.1+r233831-7.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.29.5-47.3.2
3.29.5-47.3.2
gcc-4.7
Ubuntu:14.04:LTS
 All versions, plus listed versions
4.7.3-7ubuntu34.7.3-8ubuntu14.7.3-9ubuntu14.7.3-9ubuntu24.7.3-10ubuntu14.7.3-11ubuntu14.7.3-12ubuntu1
 None known
gcc-4.8
Ubuntu:14.04:LTS
 All versions, plus listed versions
4.8.1-10ubuntu84.8.2-1ubuntu14.8.2-1ubuntu24.8.2-10ubuntu14.8.2-10ubuntu2
Show 18 moreShow less
4.8.2-12ubuntu24.8.2-13ubuntu14.8.2-14ubuntu14.8.2-14ubuntu24.8.2-14ubuntu44.8.2-15ubuntu34.8.2-16ubuntu14.8.2-16ubuntu34.8.2-16ubuntu44.8.2-16ubuntu54.8.2-16ubuntu64.8.2-17ubuntu14.8.2-17ubuntu24.8.2-19ubuntu14.8.4-2ubuntu1~14.044.8.4-2ubuntu1~14.04.14.8.4-2ubuntu1~14.04.34.8.4-2ubuntu1~14.04.4
 None known
gcc-mingw-w64
Ubuntu:14.04:LTS
 All versions, plus listed versions
891112
 None known
gcc-4.7
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.7.4-3ubuntu34.7.4-3ubuntu74.7.4-3ubuntu94.7.4-3ubuntu104.7.4-3ubuntu114.7.4-3ubuntu12
 None known
gcc-4.7-armel-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.861.903
 None known
gcc-4.7-armhf-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.861.873
 None known
gcc-4.8
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.5-1ubuntu14.8.5-2ubuntu14.8.5-3ubuntu14.8.5-3ubuntu24.8.5-3ubuntu34.8.5-4ubuntu14.8.5-4ubuntu2
 None known
gcc-4.8-arm64-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.170.182
 None known
gcc-4.8-armhf-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.160.172
 None known
gcc-4.8-powerpc-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.190.203
 None known
gcc-4.8-ppc64el-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.80.92
 None known
gcc-arm-linux-androideabi
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.20130705.1-0ubuntu80.20130705.1-0ubuntu9
 None known
gcc-arm-none-eabi
Ubuntu:16.04:LTS
 All versions, plus listed versions
15:4.9.3+svn227297-115:4.9.3+svn227297-1build115:4.9.3+svn231177-1
 None known
gcc-avr
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:4.8.1+Atmel3.4.5-11:4.9.2+Atmel3.5.0-1
 None known
gcc-i686-linux-android
Ubuntu:16.04:LTS
 All versions, plus listed versions
79
 None known
gcc-msp430
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.6.3~mspgcc-20120406-7ubuntu3
 None known
gcc-4.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.8.5-4ubuntu64.8.5-4ubuntu74.8.5-4ubuntu8
 None known
gcc-msp430
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.6.3~mspgcc-20120406-7ubuntu44.6.3~mspgcc-20120406-7ubuntu5
 None known
gcc-msp430
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.6.3~mspgcc-20120406-7.1ubuntu3
 None known
gcc-msp430
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.6.3~mspgcc-20120406-7.1ubuntu3
 None known
gcc5
openSUSE:Tumbleweed
 before 5.4.1+r240125-1.5
5.4.1+r240125-1.5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5276 is a medium vulnerability (CVSS 5.0) in Gnu Gcc, published October 7, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.94%, the 87th percentile. Fixed in gcc 4.9.2-4.1.mga5.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 52 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open