The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gcc packages installed that are affected by multiple vulnerabilities:

  - Multiple integer overflows in libgfortran might allow     remote attackers to execute arbitrary code or cause a     denial of service (Fortran application crash) via     vectors related to array allocation. (CVE-2014-5044)

  - The std::random_device class in libstdc++ in the GNU     Compiler Collection (aka GCC) before 4.9.4 does not     properly handle short reads from blocking sources, which     makes it easier for context-dependent attackers to     predict the random values via unspecified vectors.
    (CVE-2015-5276)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

更新済みの gcc パッケージは、以下のセキュリティの問題を修正します：

複数の整数オーバーフローの問題が、Fortran コンパイラのランタイムサポートライブラリである libgfortran　に見つかりました。これらは、Fortran アプリケーションをクラッシュさせたり、任意のコードを実行したりするために使用される可能性があります（CVE-2014-5044）。

これらは以下のバグも修正します：

gcc rtl-optimization sched2 は、glibc およびカーネル内でランダムパニックを引き起こす syscall シーケンスを不適切にコンパイルします（gcc/PR61801）

clang++ は、ビルド中に cxxabi.h および cxxabi_tweaks の検出に失敗します（mga#13543）

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gcc packages installed that are affected by multiple vulnerabilities:

  - Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause     a denial of service (Fortran application crash) via vectors related to array allocation. (CVE-2014-5044)

  - The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not     properly handle short reads from blocking sources, which makes it easier for context-dependent attackers     to predict the random values via unspecified vectors. (CVE-2015-5276)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated gcc packages fix the following security issue :

Multiple integer overflow issues were found in libgfortran, the run-time support library for the Fortran compiler. These could possibly be used to crash a Fortran application or cause it to execute arbitrary code CVE-2014-5044).

They also fix the following bugs :

The gcc rtl-optimization sched2 miscompiles syscall sequence wich can cause random panic in glibc and kernel (gcc/PR61801)

clang++ fails to find cxxabi.h and cxxabi_tweaks.h during build (mga#13543)

更新后的 gcc 程序包修复了以下安全问题：

发现 libgfortran（Fortran 编译器的运行时支持库）中存在多个整数溢出问题。这些问题可能被利用来造成 Fortran 应用程序崩溃，或者使其执行任意代码 (CVE-2014-5044)。

它们还修复了以下缺陷：

可造成 glibc 和内核中随机错误的 gcc rtl-optimization sched2 miscompiles syscall 序列 (gcc/PR61801)

Clang++ 在构建时找不到 cxxabi.h 和 cxxabi_tweaks.h (mga#13543)

更新版 gcc 套件可修正下列安全性問題：

在 Fortran 編譯器的執行時間支援程式庫 libgfortran 中發現多個整數溢位問題。這些問題可能用來損毀 Fortran 應用程式，或使其執行任意程式碼 (CVE-2014-5044)。

它們也可修正下列錯誤：

gcc rtl-optimization sched2 會錯誤編譯可能在 glibc 和核心中造成隨機錯誤的系統呼叫序列 (gcc/PR61801)

clang++ 在構建期間找不到 cxxabi.h 和 cxxabi_tweaks.h (mga#13543)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gcc: integer overflow flaws in libgfortran (CVE-2014-5044)

  - Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.
    (CVE-2002-2439)

  - The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not     properly handle short reads from blocking sources, which makes it easier for context-dependent attackers     to predict the random values via unspecified vectors. (CVE-2015-5276)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gcc: integer overflow flaws in libgfortran (CVE-2014-5044)

  - The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not     properly handle short reads from blocking sources, which makes it easier for context-dependent attackers     to predict the random values via unspecified vectors. (CVE-2015-5276)

  - Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to     execute arbitrary code via a crafted executable, which triggers a buffer overflow. (CVE-2016-2226)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gcc: integer overflow flaws in libgfortran (CVE-2014-5044)

  - Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.
    (CVE-2002-2439)

  - Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to     execute arbitrary code via a crafted executable, which triggers a buffer overflow. (CVE-2016-2226)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
132504	NewStart CGSL CORE 5.05 / MAIN 5.05 : gcc Multiple Vulnerabilities (NS-SA-2019-0233)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2021/1/14	critical
82446	Mandriva Linux セキュリティアドバイザリ：gcc（MDVSA-2015:170）	Nessus	Mandriva Local Security Checks	2015/3/31	2021/1/14	high
160739	NewStart CGSL CORE 5.04 / MAIN 5.04 : gcc Multiple Vulnerabilities (NS-SA-2022-0019)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2022/5/9	critical
82446	Mandriva Linux Security Advisory : gcc (MDVSA-2015:170)	Nessus	Mandriva Local Security Checks	2015/3/31	2021/1/14	high
82446	Mandriva Linux 安全公告：gcc (MDVSA-2015:170)	Nessus	Mandriva Local Security Checks	2015/3/31	2021/1/14	high
82446	Mandriva Linux 安全性公告：gcc (MDVSA-2015:170)	Nessus	Mandriva Local Security Checks	2015/3/31	2021/1/14	high
198339	RHEL 6 : gcc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
198409	RHEL 7 : gcc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/7/11	critical
198425	RHEL 5 : gcc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical

検出

プラグインの検索

critical

high

critical

high

high

high

critical

critical

critical