Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2017-11671

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Published: Jul 26, 2017 | Modified: Apr 20, 2025
CVSS 3.x
4
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
5.6 LOW
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Ubuntu
LOW
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-11671
CWEhttps://cwe.mitre.org/data/definitions/338.html

Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.

Weakness

The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG’s algorithm is not cryptographically strong.

Affected Software

NameVendorStart VersionEnd Version
GccGnu4.6 (including)4.6 (including)
GccGnu4.7 (including)4.7 (including)
GccGnu4.8 (including)4.8 (including)
GccGnu4.9 (including)4.9 (including)
GccGnu5.0 (including)5.0 (including)
GccGnu5.1 (including)5.1 (including)
GccGnu5.2 (including)5.2 (including)
GccGnu5.3 (including)5.3 (including)
GccGnu5.4 (including)5.4 (including)
GccGnu6.0 (including)6.0 (including)
GccGnu6.1 (including)6.1 (including)
GccGnu6.2 (including)6.2 (including)
GccGnu6.3 (including)6.3 (including)
Red Hat Enterprise Linux 7RedHatgcc-0:4.8.5-28.el7*
Gcc-3.3Ubuntuartful*
Gcc-3.3Ubuntubionic*
Gcc-3.3Ubuntucosmic*
Gcc-3.3Ubuntudisco*
Gcc-3.3Ubuntueoan*
Gcc-3.3Ubuntuesm-apps/xenial*
Gcc-3.3Ubuntufocal*
Gcc-3.3Ubuntugroovy*
Gcc-3.3Ubuntuhirsute*
Gcc-3.3Ubuntuimpish*
Gcc-3.3Ubuntukinetic*
Gcc-3.3Ubuntulunar*
Gcc-3.3Ubuntumantic*
Gcc-3.3Ubuntutrusty*
Gcc-3.3Ubuntutrusty/esm*
Gcc-3.3Ubuntuxenial*
Gcc-3.3Ubuntuzesty*
Gcc-4.4Ubuntutrusty*
Gcc-4.6Ubuntuprecise/esm*
Gcc-4.6Ubuntutrusty*
Gcc-4.7Ubuntuesm-apps/xenial*
Gcc-4.7Ubuntutrusty*
Gcc-4.7Ubuntutrusty/esm*
Gcc-4.7Ubuntuxenial*
Gcc-4.7Ubuntuzesty*
Gcc-4.7-armel-crossUbuntuesm-apps/xenial*
Gcc-4.7-armel-crossUbuntutrusty*
Gcc-4.7-armel-crossUbuntuxenial*
Gcc-4.7-armel-crossUbuntuzesty*
Gcc-4.7-armhf-crossUbuntuesm-apps/xenial*
Gcc-4.7-armhf-crossUbuntutrusty*
Gcc-4.7-armhf-crossUbuntuxenial*
Gcc-4.7-armhf-crossUbuntuzesty*
Gcc-4.8Ubuntuartful*
Gcc-4.8Ubuntubionic*
Gcc-4.8Ubuntucosmic*
Gcc-4.8Ubuntuesm-apps/xenial*
Gcc-4.8Ubuntutrusty*
Gcc-4.8Ubuntutrusty/esm*
Gcc-4.8Ubuntuxenial*
Gcc-4.8Ubuntuzesty*
Gcc-4.8-arm64-crossUbuntuesm-apps/xenial*
Gcc-4.8-arm64-crossUbuntutrusty*
Gcc-4.8-arm64-crossUbuntuxenial*
Gcc-4.8-armhf-crossUbuntuesm-apps/xenial*
Gcc-4.8-armhf-crossUbuntutrusty*
Gcc-4.8-armhf-crossUbuntuxenial*
Gcc-4.8-powerpc-crossUbuntuesm-apps/xenial*
Gcc-4.8-powerpc-crossUbuntutrusty*
Gcc-4.8-powerpc-crossUbuntuxenial*
Gcc-4.8-ppc64el-crossUbuntuesm-apps/xenial*
Gcc-4.8-ppc64el-crossUbuntutrusty*
Gcc-4.8-ppc64el-crossUbuntuxenial*
Gcc-4.9Ubuntuesm-apps/xenial*
Gcc-4.9Ubuntuvivid/ubuntu-core*
Gcc-4.9Ubuntuxenial*
Gcc-4.9Ubuntuzesty*
Gcc-5Ubuntuartful*
Gcc-5Ubuntuesm-infra-legacy/xenial*
Gcc-5Ubuntuesm-infra/xenial*
Gcc-5Ubuntuupstream*
Gcc-5Ubuntuxenial*
Gcc-5Ubuntuzesty*
Gcc-5-crossUbuntuartful*
Gcc-5-crossUbuntuesm-infra/xenial*
Gcc-5-crossUbuntuxenial*
Gcc-5-crossUbuntuzesty*
Gcc-6Ubuntuartful*
Gcc-6Ubuntuupstream*
Gcc-6Ubuntuzesty*
Gcc-6-crossUbuntuartful*
Gcc-6-crossUbuntuupstream*
Gcc-6-crossUbuntuzesty*
Gcc-6-cross-portsUbuntuartful*
Gcc-6-cross-portsUbuntuupstream*
Gcc-6-cross-portsUbuntuzesty*
Gcc-7Ubuntuartful*
Gcc-7Ubuntuupstream*
Gcc-7-crossUbuntuartful*
Gcc-7-cross-portsUbuntuartful*
Gcc-arm-linux-androideabiUbuntuesm-apps/xenial*
Gcc-arm-linux-androideabiUbuntutrusty*
Gcc-arm-linux-androideabiUbuntuxenial*
Gcc-arm-linux-androideabiUbuntuzesty*
Gcc-arm-none-eabiUbuntuartful*
Gcc-arm-none-eabiUbuntubionic*
Gcc-arm-none-eabiUbuntucosmic*
Gcc-arm-none-eabiUbuntudisco*
Gcc-arm-none-eabiUbuntueoan*
Gcc-arm-none-eabiUbuntuesm-apps/xenial*
Gcc-arm-none-eabiUbuntufocal*
Gcc-arm-none-eabiUbuntugroovy*
Gcc-arm-none-eabiUbuntuhirsute*
Gcc-arm-none-eabiUbuntuimpish*
Gcc-arm-none-eabiUbuntukinetic*
Gcc-arm-none-eabiUbuntulunar*
Gcc-arm-none-eabiUbuntumantic*
Gcc-arm-none-eabiUbuntuoracular*
Gcc-arm-none-eabiUbuntuplucky*
Gcc-arm-none-eabiUbuntutrusty*
Gcc-arm-none-eabiUbuntuxenial*
Gcc-arm-none-eabiUbuntuzesty*
Gcc-avrUbuntuartful*
Gcc-avrUbuntubionic*
Gcc-avrUbuntucosmic*
Gcc-avrUbuntudisco*
Gcc-avrUbuntueoan*
Gcc-avrUbuntuesm-apps/xenial*
Gcc-avrUbuntufocal*
Gcc-avrUbuntugroovy*
Gcc-avrUbuntuhirsute*
Gcc-avrUbuntuimpish*
Gcc-avrUbuntukinetic*
Gcc-avrUbuntulunar*
Gcc-avrUbuntumantic*
Gcc-avrUbuntuoracular*
Gcc-avrUbuntuplucky*
Gcc-avrUbuntutrusty*
Gcc-avrUbuntuxenial*
Gcc-avrUbuntuzesty*
Gcc-defaultsUbuntuartful*
Gcc-defaultsUbuntucosmic*
Gcc-defaultsUbuntudisco*
Gcc-defaultsUbuntueoan*
Gcc-defaultsUbuntugroovy*
Gcc-defaultsUbuntuhirsute*
Gcc-defaultsUbuntuimpish*
Gcc-defaultsUbuntuprecise/esm*
Gcc-defaultsUbuntutrusty*
Gcc-defaultsUbuntuxenial*
Gcc-defaultsUbuntuzesty*
Gcc-defaults-arm64-crossUbuntutrusty*
Gcc-defaults-armel-crossUbuntutrusty*
Gcc-defaults-armhf-crossUbuntutrusty*
Gcc-defaults-powerpc-crossUbuntutrusty*
Gcc-defaults-ppc64el-crossUbuntutrusty*
Gcc-h8300-hmsUbuntuartful*
Gcc-h8300-hmsUbuntubionic*
Gcc-h8300-hmsUbuntucosmic*
Gcc-h8300-hmsUbuntudisco*
Gcc-h8300-hmsUbuntueoan*
Gcc-h8300-hmsUbuntuesm-apps/xenial*
Gcc-h8300-hmsUbuntufocal*
Gcc-h8300-hmsUbuntugroovy*
Gcc-h8300-hmsUbuntuhirsute*
Gcc-h8300-hmsUbuntuimpish*
Gcc-h8300-hmsUbuntukinetic*
Gcc-h8300-hmsUbuntulunar*
Gcc-h8300-hmsUbuntumantic*
Gcc-h8300-hmsUbuntuoracular*
Gcc-h8300-hmsUbuntuplucky*
Gcc-h8300-hmsUbuntutrusty*
Gcc-h8300-hmsUbuntuxenial*
Gcc-h8300-hmsUbuntuzesty*
Gcc-i686-linux-androidUbuntuesm-apps/xenial*
Gcc-i686-linux-androidUbuntutrusty*
Gcc-i686-linux-androidUbuntuxenial*
Gcc-i686-linux-androidUbuntuzesty*
Gcc-m68hc1xUbuntuartful*
Gcc-m68hc1xUbuntubionic*
Gcc-m68hc1xUbuntucosmic*
Gcc-m68hc1xUbuntudisco*
Gcc-m68hc1xUbuntueoan*
Gcc-m68hc1xUbuntuesm-apps/xenial*
Gcc-m68hc1xUbuntufocal*
Gcc-m68hc1xUbuntugroovy*
Gcc-m68hc1xUbuntuhirsute*
Gcc-m68hc1xUbuntuimpish*
Gcc-m68hc1xUbuntukinetic*
Gcc-m68hc1xUbuntutrusty*
Gcc-m68hc1xUbuntuxenial*
Gcc-m68hc1xUbuntuzesty*
Gcc-mingw-w64Ubuntuartful*
Gcc-mingw-w64Ubuntubionic*
Gcc-mingw-w64Ubuntucosmic*
Gcc-mingw-w64Ubuntudisco*
Gcc-mingw-w64Ubuntueoan*
Gcc-mingw-w64Ubuntuesm-apps/xenial*
Gcc-mingw-w64Ubuntufocal*
Gcc-mingw-w64Ubuntugroovy*
Gcc-mingw-w64Ubuntuhirsute*
Gcc-mingw-w64Ubuntuimpish*
Gcc-mingw-w64Ubuntukinetic*
Gcc-mingw-w64Ubuntulunar*
Gcc-mingw-w64Ubuntumantic*
Gcc-mingw-w64Ubuntuoracular*
Gcc-mingw-w64Ubuntuplucky*
Gcc-mingw-w64Ubuntutrusty*
Gcc-mingw-w64Ubuntutrusty/esm*
Gcc-mingw-w64Ubuntuxenial*
Gcc-mingw-w64Ubuntuzesty*
Gcc-msp430Ubuntuartful*
Gcc-msp430Ubuntubionic*
Gcc-msp430Ubuntucosmic*
Gcc-msp430Ubuntudisco*
Gcc-msp430Ubuntueoan*
Gcc-msp430Ubuntuesm-apps/xenial*
Gcc-msp430Ubuntufocal*
Gcc-msp430Ubuntugroovy*
Gcc-msp430Ubuntuhirsute*
Gcc-msp430Ubuntuimpish*
Gcc-msp430Ubuntukinetic*
Gcc-msp430Ubuntulunar*
Gcc-msp430Ubuntumantic*
Gcc-msp430Ubuntutrusty*
Gcc-msp430Ubuntuxenial*
Gcc-msp430Ubuntuzesty*
Gcc-optUbuntuartful*
Gcc-optUbuntutrusty*
Gcc-optUbuntuzesty*
Gcc-snapshotUbuntuartful*
Gcc-snapshotUbuntuesm-apps/xenial*
Gcc-snapshotUbuntutrusty*
Gcc-snapshotUbuntuupstream*
Gcc-snapshotUbuntuxenial*
Gcc-snapshotUbuntuzesty*
Gccgo-4.9Ubuntutrusty*
Gccgo-4.9Ubuntutrusty/esm*
Gccgo-6Ubuntuesm-infra-legacy/xenial*
Gccgo-6Ubuntuesm-infra/xenial*
Gccgo-6Ubuntuxenial*

Extended Description

When a non-cryptographic PRNG is used in a cryptographic context, it can expose the cryptography to certain types of attacks. Often a pseudo-random number generator (PRNG) is not designed for cryptography. Sometimes a mediocre source of randomness is sufficient or preferable for algorithms that use random numbers. Weak generators generally take less processing power and/or do not use the precious, finite, entropy sources on a system. While such PRNGs might have very useful features, these same features could be used to break the cryptography.

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use