CVE-2019-15847 -- gcc-8, gcc-7| ID: oval:org.secpod.oval:def:2003589 | Date: (C)2020-09-25 (M)2023-10-15 |
| Class: VULNERABILITY | Family: unix |
The POWER9 backend in GNU Compiler Collection before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn call may be the same.
