Known vulnerabilities in gcc (Red Hat package)
Vendor:
Red Hat Inc.
Software:
gcc (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:gcc_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
6
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
4.8.5-45.el7_9
4.8.5-40.el7_7
11.5.0-5.el9_5
8.5.0-18.3.el8_8
8.5.0-23.el8_10
8.4.1-1.4.el8_4
8.3.1-8.el8_2
8.5.0-10.4.el8_6
11.2.1-9.5.el9_0
11.4.1-4.el9_4
11.3.1-4.4.el9_2
3.4.6-11.el4_8.1
4.1.2-46.el5_4.2
8.5.0-3.el8
8.5.0-4.el8_5
8.3.1-5.1.el8
8.3.1-5.el8
4.1.2-50.el5
4.8.5-36.el7_6
4.8.5-36.el7
4.8.5-28.el7_5
4.8.5-28.el7
4.8.5-16.el7_4
4.8.5-16.el7
4.8.5-11.el7
4.4.7-23.el6
4.4.7-18.el6_9
4.4.7-18.el6
4.4.7-17.el6
4.4.7-16.el6
4.4.7-11.el6
4.4.7-4.el6
4.4.7-3.el6
4.4.6-4.el6
4.4.6-3.el6
4.4.5-6.el6
4.4.4-13.el6
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU57848 - Improper input validation CVE-2021-42574 |
CWE-20 | Low | 8.5.0-4.el8_5 | 02.11.2021 |
SB2021110201 SB2021110205 SB2021110206 and 64 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 8.3.1-5.1.el8 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU51732 - Security Features CVE-2021-3450 |
CWE-254 | Medium | 8.3.1-5.1.el8 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 50 more |
||
| #VU28259 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2019-15847 |
CWE-338 | Low | 8.3.1-5.el8 | 26.05.2020 |
SB2019090311 SB2020052620 SB2020052622 and 5 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 4.8.5-40.el7_7, 4.8.5-45.el7_9, 8.3.1-8.el8_2, 8.4.1-1.4.el8_4, 8.5.0-10.4.el8_6, 8.5.0-18.3.el8_8, 8.5.0-23.el8_10, 11.2.1-9.5.el9_0, 11.3.1-4.4.el9_2, 11.4.1-4.el9_4, 11.5.0-5.el9_5 | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
||
| #VU16897 - Integer overflow CVE-2018-20673 |
CWE-190 | Low | 8.5.0-3.el8 | 10.01.2019 |
SB2018123105 SB2021111049 SB2023092124 and 2 more |