Description
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected products
- gnu / GCC7.5.0
- openSUSE / Leap15.0 – 15.0
- openSUSE / Leap15.1 – 15.1
References
- MISChttps://gcc.gnu.org/bugzilla/show_bug.cgi?id=91481
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html
Updated 15m ago · 8 sources