CVE-2015-5276

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

• CWE-200

• http://lists.opensuse.org/opensuse-updates/2015-11/msg00054.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-04/msg00052.htmlMailing List, Third Party Advisory
• http://www.securitytracker.com/id/1034375Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1262846Issue Tracking, Third Party Advisory
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65142Issue Tracking, Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00054.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-04/msg00052.htmlMailing List, Third Party Advisory
• http://www.securitytracker.com/id/1034375Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1262846Issue Tracking, Third Party Advisory
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65142Issue Tracking, Vendor Advisory

Published

Nov 17, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5270Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-5271The TripleO Heat templates (tripleo-heat-templates) do not p…
• CVE-2015-5272The Forum module in Moodle 2.7.x before 2.7.10 allows remote…
• CVE-2015-5273The abrt-action-install-debuginfo-to-abrt-cache help program…
• CVE-2015-5274rubygem-openshift-origin-console in Red Hat OpenShift 2.2 al…
• CVE-2015-5275Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-5277The get_contents function in nss_files/files-XXX.c in the Na…
• CVE-2015-5278The ne2000_receive function in hw/net/ne2000.c in QEMU befor…6.5
• CVE-2015-5279Heap-based buffer overflow in the ne2000_receive function in…
• CVE-2015-5280Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-5281The grub2 package before 2.02-0.29 in Red Hat Enterprise Lin…
• CVE-2015-5282Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 an…