Unrated severityNVD Advisory· Published Nov 17, 2015· Updated Jun 17, 2026

CVE-2015-5276

Description

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Gcc2 versions
cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*range: <4.9.4
- (no CPE)range: <4.9.4
osv-coords61 versions
pkg:rpm/opensuse/gcc5&distro=openSUSE%20Tumbleweed pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/gcc48&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/gcc48&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/gcc48&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/gcc48&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/gcc48&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Toolchain%2012 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/gcc5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/libffi48&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/libffi48&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/libffi48&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Toolchain%2012 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/libgcj48&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/libgcj48&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/libgcj48&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4
< 5.4.1+r240125-1.5+ 60 more
- (no CPE)range: < 5.4.1+r240125-1.5
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-4.2
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-9.1
- (no CPE)range: < 5.3.1+r233831-10.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 4.8.5-24.1
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-updates/2015-11/msg00054.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2016-04/msg00052.htmlnvdMailing ListThird Party Advisory
www.securitytracker.com/id/1034375nvdThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
gcc.gnu.org/bugzilla/show_bug.cginvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000