{"id":"CVE-2019-15847","details":"The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.","modified":"2026-07-17T20:59:46.640739846Z","published":"2019-09-02T23:15:10.837Z","related":["SUSE-SU-2019:2702-1","SUSE-SU-2019:3061-1","SUSE-SU-2020:0394-1","SUSE-SU-2023:3662-1","openSUSE-SU-2019:2364-1","openSUSE-SU-2019:2365-1","openSUSE-SU-2020:0716-1","openSUSE-SU-2024:10703-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"15.1"},{"last_affected":"15.1"}],"source":"CPE_STRING","vendor_product":"opensuse:leap","cpes":["cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html"},{"type":"REPORT","url":"https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91481"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gcc-mirror/gcc","events":[{"introduced":"0"},{"fixed":"b2d961e7342b5ba4e57adfa81cb189b738d10901"},{"fixed":"8cd3bffead2ed1d1998c190865694f920fbc93ab"},{"fixed":"4212a6a3e44f870412d9025eeb323fd4f50a61da"},{"fixed":"6e6e3f144a33ae504149dc992453b4f6dea12fdb"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"7.5.0"},{"introduced":"8.0"},{"fixed":"8.4.0"},{"introduced":"9.0"},{"fixed":"9.3.0"},{"introduced":"10.0"},{"fixed":"10.1.0"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*"}}],"versions":["releases/gcc-9.2.0","releases/gcc-9.1.0","misc/cutover-git","basepoints/gcc-10","releases/gcc-8.3.0","releases/gcc-7.4.0","releases/gcc-8.2.0","releases/gcc-8.1.0","basepoints/gcc-9","releases/gcc-7.3.0","releases/gcc-7.2.0","releases/gcc-7.1.0","basepoints/gcc-8","basepoints/gcc-7","basepoints/gcc-6","basepoints/gcc-5","misc/cutover-cvs2svn","misc/cutover-egcs-1","misc/cutover-egcs-0","basepoints/gcc-0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-15847.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}