{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "integer overflow flaws in libgfortran", "tracking": { "current_release_date": "2026-07-25T12:02:32+00:00", "generator": { "date": "2026-07-25T12:02:32+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2014-5044", "initial_release_date": "2014-06-17T00:00:00+00:00", "revision_history": [ { "date": "2026-07-25T12:02:32+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 5.11", "product": { "name": "Red Hat Enterprise Linux 5.11", "product_id": "rhel-5.11.z.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:5" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_version", "name": "compat-libgfortran-41", "product": { "name": "compat-libgfortran-41", "product_id": "compat-libgfortran-41", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-libgfortran-41" } } }, { "category": "product_version", "name": "compat-libgfortran-41-debuginfo", "product": { "name": "compat-libgfortran-41-debuginfo", "product_id": "compat-libgfortran-41-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-libgfortran-41-debuginfo" } } }, { "category": "product_version", "name": "compat-libgfortran-41", "product": { "name": "compat-libgfortran-41", "product_id": "compat-libgfortran-41.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/compat-libgfortran-41?arch=src" } } }, { "category": "product_version", "name": "cpp", "product": { "name": "cpp", "product_id": "cpp", "product_identification_helper": { "purl": "pkg:rpm/redhat/cpp" } } }, { "category": "product_version", "name": "gcc", "product": { "name": "gcc", "product_id": "gcc", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc" } } }, { "category": "product_version", "name": "gcc-base-debuginfo", "product": { "name": "gcc-base-debuginfo", "product_id": "gcc-base-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-base-debuginfo" } } }, { "category": "product_version", "name": "gcc-c++", "product": { "name": "gcc-c++", "product_id": "gcc-c++", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-c%2B%2B" } } }, { "category": "product_version", "name": "gcc-debuginfo", "product": { "name": "gcc-debuginfo", "product_id": "gcc-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-debuginfo" } } }, { "category": "product_version", "name": "gcc-gfortran", "product": { "name": "gcc-gfortran", "product_id": "gcc-gfortran", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-gfortran" } } }, { "category": "product_version", "name": "gcc-gnat", "product": { "name": "gcc-gnat", "product_id": "gcc-gnat", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-gnat" } } }, { "category": "product_version", "name": "gcc-go", "product": { "name": "gcc-go", "product_id": "gcc-go", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-go" } } }, { "category": "product_version", "name": "gcc-java", "product": { "name": "gcc-java", "product_id": "gcc-java", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-java" } } }, { "category": "product_version", "name": "gcc-objc", "product": { "name": "gcc-objc", "product_id": "gcc-objc", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-objc" } } }, { "category": "product_version", "name": "gcc-objc++", "product": { "name": "gcc-objc++", "product_id": "gcc-objc++", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-objc%2B%2B" } } }, { "category": "product_version", "name": "gcc-plugin-devel", "product": { "name": "gcc-plugin-devel", "product_id": "gcc-plugin-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc-plugin-devel" } } }, { "category": "product_version", "name": "gcc", "product": { "name": "gcc", "product_id": "gcc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc?arch=src" } } }, { "category": "product_version", "name": "gcc44", "product": { "name": "gcc44", "product_id": "gcc44.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gcc44?arch=src" } } }, { "category": "product_version", "name": "libasan", "product": { "name": "libasan", "product_id": "libasan", "product_identification_helper": { "purl": "pkg:rpm/redhat/libasan" } } }, { "category": "product_version", "name": "libasan-static", "product": { "name": "libasan-static", "product_id": "libasan-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libasan-static" } } }, { "category": "product_version", "name": "libatomic", "product": { "name": "libatomic", "product_id": "libatomic", "product_identification_helper": { "purl": "pkg:rpm/redhat/libatomic" } } }, { "category": "product_version", "name": "libatomic-static", "product": { "name": "libatomic-static", "product_id": "libatomic-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libatomic-static" } } }, { "category": "product_version", "name": "libgcc", "product": { "name": "libgcc", "product_id": "libgcc", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgcc" } } }, { "category": "product_version", "name": "libgcj", "product": { "name": "libgcj", "product_id": "libgcj", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgcj" } } }, { "category": "product_version", "name": "libgcj-devel", "product": { "name": "libgcj-devel", "product_id": "libgcj-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgcj-devel" } } }, { "category": "product_version", "name": "libgcj-src", "product": { "name": "libgcj-src", "product_id": "libgcj-src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgcj-src" } } }, { "category": "product_version", "name": "libgfortran", "product": { "name": "libgfortran", "product_id": "libgfortran", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgfortran" } } }, { "category": "product_version", "name": "libgfortran-static", "product": { "name": "libgfortran-static", "product_id": "libgfortran-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgfortran-static" } } }, { "category": "product_version", "name": "libgnat", "product": { "name": "libgnat", "product_id": "libgnat", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgnat" } } }, { "category": "product_version", "name": "libgnat-devel", "product": { "name": "libgnat-devel", "product_id": "libgnat-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgnat-devel" } } }, { "category": "product_version", "name": "libgnat-static", "product": { "name": "libgnat-static", "product_id": "libgnat-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgnat-static" } } }, { "category": "product_version", "name": "libgo", "product": { "name": "libgo", "product_id": "libgo", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgo" } } }, { "category": "product_version", "name": "libgo-devel", "product": { "name": "libgo-devel", "product_id": "libgo-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgo-devel" } } }, { "category": "product_version", "name": "libgo-static", "product": { "name": "libgo-static", "product_id": "libgo-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgo-static" } } }, { "category": "product_version", "name": "libgomp", "product": { "name": "libgomp", "product_id": "libgomp", "product_identification_helper": { "purl": "pkg:rpm/redhat/libgomp" } } }, { "category": "product_version", "name": "libitm", "product": { "name": "libitm", "product_id": "libitm", "product_identification_helper": { "purl": "pkg:rpm/redhat/libitm" } } }, { "category": "product_version", "name": "libitm-devel", "product": { "name": "libitm-devel", "product_id": "libitm-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libitm-devel" } } }, { "category": "product_version", "name": "libitm-static", "product": { "name": "libitm-static", "product_id": "libitm-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libitm-static" } } }, { "category": "product_version", "name": "libmudflap", "product": { "name": "libmudflap", "product_id": "libmudflap", "product_identification_helper": { "purl": "pkg:rpm/redhat/libmudflap" } } }, { "category": "product_version", "name": "libmudflap-devel", "product": { "name": "libmudflap-devel", "product_id": "libmudflap-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libmudflap-devel" } } }, { "category": "product_version", "name": "libmudflap-static", "product": { "name": "libmudflap-static", "product_id": "libmudflap-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libmudflap-static" } } }, { "category": "product_version", "name": "libobjc", "product": { "name": "libobjc", "product_id": "libobjc", "product_identification_helper": { "purl": "pkg:rpm/redhat/libobjc" } } }, { "category": "product_version", "name": "libquadmath", "product": { "name": "libquadmath", "product_id": "libquadmath", "product_identification_helper": { "purl": "pkg:rpm/redhat/libquadmath" } } }, { "category": "product_version", "name": "libquadmath-devel", "product": { "name": "libquadmath-devel", "product_id": "libquadmath-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libquadmath-devel" } } }, { "category": "product_version", "name": "libquadmath-static", "product": { "name": "libquadmath-static", "product_id": "libquadmath-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libquadmath-static" } } }, { "category": "product_version", "name": "libstdc++", "product": { "name": "libstdc++", "product_id": "libstdc++", "product_identification_helper": { "purl": "pkg:rpm/redhat/libstdc%2B%2B" } } }, { "category": "product_version", "name": "libstdc++-devel", "product": { "name": "libstdc++-devel", "product_id": "libstdc++-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libstdc%2B%2B-devel" } } }, { "category": "product_version", "name": "libstdc++-docs", "product": { "name": "libstdc++-docs", "product_id": "libstdc++-docs", "product_identification_helper": { "purl": "pkg:rpm/redhat/libstdc%2B%2B-docs" } } }, { "category": "product_version", "name": "libstdc++-static", "product": { "name": "libstdc++-static", "product_id": "libstdc++-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libstdc%2B%2B-static" } } }, { "category": "product_version", "name": "libtsan", "product": { "name": "libtsan", "product_id": "libtsan", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtsan" } } }, { "category": "product_version", "name": "libtsan-static", "product": { "name": "libtsan-static", "product_id": "libtsan-static", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtsan-static" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "compat-libgfortran-41 as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:compat-libgfortran-41" }, "product_reference": "compat-libgfortran-41", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-libgfortran-41 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-libgfortran-41" }, "product_reference": "compat-libgfortran-41", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-libgfortran-41-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:compat-libgfortran-41-debuginfo" }, "product_reference": "compat-libgfortran-41-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-libgfortran-41-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-libgfortran-41-debuginfo" }, "product_reference": "compat-libgfortran-41-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-libgfortran-41.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:compat-libgfortran-41.src" }, "product_reference": "compat-libgfortran-41.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "compat-libgfortran-41.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:compat-libgfortran-41.src" }, "product_reference": "compat-libgfortran-41.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "cpp as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:cpp" }, "product_reference": "cpp", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "cpp as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:cpp" }, "product_reference": "cpp", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc" }, "product_reference": "gcc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc" }, "product_reference": "gcc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-base-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-base-debuginfo" }, "product_reference": "gcc-base-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-c++ as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-c++" }, "product_reference": "gcc-c++", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-c++ as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-c++" }, "product_reference": "gcc-c++", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-debuginfo" }, "product_reference": "gcc-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-debuginfo" }, "product_reference": "gcc-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-gfortran as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-gfortran" }, "product_reference": "gcc-gfortran", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-gfortran as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-gfortran" }, "product_reference": "gcc-gfortran", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-gnat as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-gnat" }, "product_reference": "gcc-gnat", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-gnat as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-gnat" }, "product_reference": "gcc-gnat", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-go as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-go" }, "product_reference": "gcc-go", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-java as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-java" }, "product_reference": "gcc-java", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-objc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-objc" }, "product_reference": "gcc-objc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-objc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-objc" }, "product_reference": "gcc-objc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-objc++ as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-objc++" }, "product_reference": "gcc-objc++", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-objc++ as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc-objc++" }, "product_reference": "gcc-objc++", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc-plugin-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc-plugin-devel" }, "product_reference": "gcc-plugin-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:gcc.src" }, "product_reference": "gcc.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:gcc.src" }, "product_reference": "gcc.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc.src as a component of Red Hat Enterprise Linux 5.11", "product_id": "rhel-5.11.z.els:gcc.src" }, "product_reference": "gcc.src", "relates_to_product_reference": "rhel-5.11.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "gcc44.src as a component of Red Hat Enterprise Linux 5.11", "product_id": "rhel-5.11.z.els:gcc44.src" }, "product_reference": "gcc44.src", "relates_to_product_reference": "rhel-5.11.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "libasan as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libasan" }, "product_reference": "libasan", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libasan-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libasan-static" }, "product_reference": "libasan-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libatomic as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libatomic" }, "product_reference": "libatomic", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libatomic as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libatomic" }, "product_reference": "libatomic", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libatomic-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libatomic-static" }, "product_reference": "libatomic-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgcc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgcc" }, "product_reference": "libgcc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgcc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgcc" }, "product_reference": "libgcc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgcj as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgcj" }, "product_reference": "libgcj", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgcj-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgcj-devel" }, "product_reference": "libgcj-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgcj-src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgcj-src" }, "product_reference": "libgcj-src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgfortran as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgfortran" }, "product_reference": "libgfortran", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgfortran as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgfortran" }, "product_reference": "libgfortran", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgfortran-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgfortran-static" }, "product_reference": "libgfortran-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgnat as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgnat" }, "product_reference": "libgnat", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgnat as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgnat" }, "product_reference": "libgnat", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgnat-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgnat-devel" }, "product_reference": "libgnat-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgnat-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgnat-devel" }, "product_reference": "libgnat-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgnat-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgnat-static" }, "product_reference": "libgnat-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgo" }, "product_reference": "libgo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgo-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgo-devel" }, "product_reference": "libgo-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgo-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgo-static" }, "product_reference": "libgo-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgomp as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libgomp" }, "product_reference": "libgomp", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libgomp as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libgomp" }, "product_reference": "libgomp", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libitm as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libitm" }, "product_reference": "libitm", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libitm as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libitm" }, "product_reference": "libitm", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libitm-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libitm-devel" }, "product_reference": "libitm-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libitm-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libitm-static" }, "product_reference": "libitm-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libmudflap as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libmudflap" }, "product_reference": "libmudflap", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libmudflap as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libmudflap" }, "product_reference": "libmudflap", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libmudflap-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libmudflap-devel" }, "product_reference": "libmudflap-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libmudflap-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libmudflap-devel" }, "product_reference": "libmudflap-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libmudflap-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libmudflap-static" }, "product_reference": "libmudflap-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libobjc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libobjc" }, "product_reference": "libobjc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libobjc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libobjc" }, "product_reference": "libobjc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libquadmath as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libquadmath" }, "product_reference": "libquadmath", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libquadmath as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libquadmath" }, "product_reference": "libquadmath", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libquadmath-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libquadmath-devel" }, "product_reference": "libquadmath-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libquadmath-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libquadmath-static" }, "product_reference": "libquadmath-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++ as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libstdc++" }, "product_reference": "libstdc++", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++ as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libstdc++" }, "product_reference": "libstdc++", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libstdc++-devel" }, "product_reference": "libstdc++-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libstdc++-devel" }, "product_reference": "libstdc++-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++-docs as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libstdc++-docs" }, "product_reference": "libstdc++-docs", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++-docs as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libstdc++-docs" }, "product_reference": "libstdc++-docs", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libstdc++-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libstdc++-static" }, "product_reference": "libstdc++-static", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libtsan as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libtsan" }, "product_reference": "libtsan", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libtsan-static as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libtsan-static" }, "product_reference": "libtsan-static", "relates_to_product_reference": "rhel-7-els.els" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-5044", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2014-07-23T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6-els.els:compat-libgfortran-41-debuginfo", "rhel-6-els.els:gcc-debuginfo", "rhel-6-els.els:libgcj-devel", "rhel-6-els.els:libgnat-devel", "rhel-6-els.els:libmudflap-devel", "rhel-6-els.els:libstdc++-devel", "rhel-6-els.els:libstdc++-docs", "rhel-7-els.els:compat-libgfortran-41-debuginfo", "rhel-7-els.els:gcc-base-debuginfo", "rhel-7-els.els:gcc-debuginfo", "rhel-7-els.els:gcc-plugin-devel", "rhel-7-els.els:libasan-static", "rhel-7-els.els:libatomic-static", "rhel-7-els.els:libgfortran-static", "rhel-7-els.els:libgnat-devel", "rhel-7-els.els:libgnat-static", "rhel-7-els.els:libgo-devel", "rhel-7-els.els:libgo-static", "rhel-7-els.els:libitm-devel", "rhel-7-els.els:libitm-static", "rhel-7-els.els:libmudflap-devel", "rhel-7-els.els:libmudflap-static", "rhel-7-els.els:libquadmath-devel", "rhel-7-els.els:libquadmath-static", "rhel-7-els.els:libstdc++-devel", "rhel-7-els.els:libstdc++-docs", "rhel-7-els.els:libstdc++-static", "rhel-7-els.els:libtsan-static" ] } ], "notes": [ { "category": "description", "text": "Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "rhel-5.11.z.els:gcc.src", "rhel-5.11.z.els:gcc44.src", "rhel-6-els.els:compat-libgfortran-41", "rhel-6-els.els:compat-libgfortran-41.src", "rhel-6-els.els:cpp", "rhel-6-els.els:gcc", "rhel-6-els.els:gcc-c++", "rhel-6-els.els:gcc-gfortran", "rhel-6-els.els:gcc-gnat", "rhel-6-els.els:gcc-java", "rhel-6-els.els:gcc-objc", "rhel-6-els.els:gcc-objc++", "rhel-6-els.els:gcc.src", "rhel-6-els.els:libatomic", "rhel-6-els.els:libgcc", "rhel-6-els.els:libgcj", "rhel-6-els.els:libgcj-src", "rhel-6-els.els:libgfortran", "rhel-6-els.els:libgnat", "rhel-6-els.els:libgomp", "rhel-6-els.els:libitm", "rhel-6-els.els:libmudflap", "rhel-6-els.els:libobjc", "rhel-6-els.els:libquadmath", "rhel-6-els.els:libstdc++", "rhel-7-els.els:compat-libgfortran-41", "rhel-7-els.els:compat-libgfortran-41.src", "rhel-7-els.els:cpp", "rhel-7-els.els:gcc", "rhel-7-els.els:gcc-c++", "rhel-7-els.els:gcc-gfortran", "rhel-7-els.els:gcc-gnat", "rhel-7-els.els:gcc-go", "rhel-7-els.els:gcc-objc", "rhel-7-els.els:gcc-objc++", "rhel-7-els.els:gcc.src", "rhel-7-els.els:libasan", "rhel-7-els.els:libatomic", "rhel-7-els.els:libgcc", "rhel-7-els.els:libgfortran", "rhel-7-els.els:libgnat", "rhel-7-els.els:libgo", "rhel-7-els.els:libgomp", "rhel-7-els.els:libitm", "rhel-7-els.els:libmudflap", "rhel-7-els.els:libobjc", "rhel-7-els.els:libquadmath", "rhel-7-els.els:libstdc++", "rhel-7-els.els:libtsan" ], "known_not_affected": [ "rhel-6-els.els:compat-libgfortran-41-debuginfo", "rhel-6-els.els:gcc-debuginfo", "rhel-6-els.els:libgcj-devel", "rhel-6-els.els:libgnat-devel", "rhel-6-els.els:libmudflap-devel", "rhel-6-els.els:libstdc++-devel", "rhel-6-els.els:libstdc++-docs", "rhel-7-els.els:compat-libgfortran-41-debuginfo", "rhel-7-els.els:gcc-base-debuginfo", "rhel-7-els.els:gcc-debuginfo", "rhel-7-els.els:gcc-plugin-devel", "rhel-7-els.els:libasan-static", "rhel-7-els.els:libatomic-static", "rhel-7-els.els:libgfortran-static", "rhel-7-els.els:libgnat-devel", "rhel-7-els.els:libgnat-static", "rhel-7-els.els:libgo-devel", "rhel-7-els.els:libgo-static", "rhel-7-els.els:libitm-devel", "rhel-7-els.els:libitm-static", "rhel-7-els.els:libmudflap-devel", "rhel-7-els.els:libmudflap-static", "rhel-7-els.els:libquadmath-devel", "rhel-7-els.els:libquadmath-static", "rhel-7-els.els:libstdc++-devel", "rhel-7-els.els:libstdc++-docs", "rhel-7-els.els:libstdc++-static", "rhel-7-els.els:libtsan-static" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-5044" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5044" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2014-5044" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-5.11.z.els:gcc.src", "rhel-5.11.z.els:gcc44.src", "rhel-6-els.els:compat-libgfortran-41", "rhel-6-els.els:compat-libgfortran-41.src", "rhel-6-els.els:cpp", "rhel-6-els.els:gcc", "rhel-6-els.els:gcc-c++", "rhel-6-els.els:gcc-gfortran", "rhel-6-els.els:gcc-gnat", "rhel-6-els.els:gcc-java", "rhel-6-els.els:gcc-objc", "rhel-6-els.els:gcc-objc++", "rhel-6-els.els:gcc.src", "rhel-6-els.els:libatomic", "rhel-6-els.els:libgcc", "rhel-6-els.els:libgcj", "rhel-6-els.els:libgcj-src", "rhel-6-els.els:libgfortran", "rhel-6-els.els:libgnat", "rhel-6-els.els:libgomp", "rhel-6-els.els:libitm", "rhel-6-els.els:libmudflap", "rhel-6-els.els:libobjc", "rhel-6-els.els:libquadmath", "rhel-6-els.els:libstdc++", "rhel-7-els.els:compat-libgfortran-41", "rhel-7-els.els:compat-libgfortran-41.src", "rhel-7-els.els:cpp", "rhel-7-els.els:gcc", "rhel-7-els.els:gcc-c++", "rhel-7-els.els:gcc-gfortran", "rhel-7-els.els:gcc-gnat", "rhel-7-els.els:gcc-go", "rhel-7-els.els:gcc-objc", "rhel-7-els.els:gcc-objc++", "rhel-7-els.els:gcc.src", "rhel-7-els.els:libasan", "rhel-7-els.els:libatomic", "rhel-7-els.els:libgcc", "rhel-7-els.els:libgfortran", "rhel-7-els.els:libgnat", "rhel-7-els.els:libgo", "rhel-7-els.els:libgomp", "rhel-7-els.els:libitm", "rhel-7-els.els:libmudflap", "rhel-7-els.els:libobjc", "rhel-7-els.els:libquadmath", "rhel-7-els.els:libstdc++", "rhel-7-els.els:libtsan" ] } ], "scores": [ { "cvss_v2": { "version": "2.0", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "baseScore": 4.6 }, "products": [ "rhel-5.11.z.els:gcc.src", "rhel-5.11.z.els:gcc44.src", "rhel-6-els.els:compat-libgfortran-41", "rhel-6-els.els:compat-libgfortran-41-debuginfo", "rhel-6-els.els:compat-libgfortran-41.src", "rhel-6-els.els:cpp", "rhel-6-els.els:gcc", "rhel-6-els.els:gcc-c++", "rhel-6-els.els:gcc-debuginfo", "rhel-6-els.els:gcc-gfortran", "rhel-6-els.els:gcc-gnat", "rhel-6-els.els:gcc-java", "rhel-6-els.els:gcc-objc", "rhel-6-els.els:gcc-objc++", "rhel-6-els.els:gcc.src", "rhel-6-els.els:libatomic", "rhel-6-els.els:libgcc", "rhel-6-els.els:libgcj", "rhel-6-els.els:libgcj-devel", "rhel-6-els.els:libgcj-src", "rhel-6-els.els:libgfortran", "rhel-6-els.els:libgnat", "rhel-6-els.els:libgnat-devel", "rhel-6-els.els:libgomp", "rhel-6-els.els:libitm", "rhel-6-els.els:libmudflap", "rhel-6-els.els:libmudflap-devel", "rhel-6-els.els:libobjc", "rhel-6-els.els:libquadmath", "rhel-6-els.els:libstdc++", "rhel-6-els.els:libstdc++-devel", "rhel-6-els.els:libstdc++-docs", "rhel-7-els.els:compat-libgfortran-41", "rhel-7-els.els:compat-libgfortran-41-debuginfo", "rhel-7-els.els:compat-libgfortran-41.src", "rhel-7-els.els:cpp", "rhel-7-els.els:gcc", "rhel-7-els.els:gcc-base-debuginfo", "rhel-7-els.els:gcc-c++", "rhel-7-els.els:gcc-debuginfo", "rhel-7-els.els:gcc-gfortran", "rhel-7-els.els:gcc-gnat", "rhel-7-els.els:gcc-go", "rhel-7-els.els:gcc-objc", "rhel-7-els.els:gcc-objc++", "rhel-7-els.els:gcc-plugin-devel", "rhel-7-els.els:gcc.src", "rhel-7-els.els:libasan", "rhel-7-els.els:libasan-static", "rhel-7-els.els:libatomic", "rhel-7-els.els:libatomic-static", "rhel-7-els.els:libgcc", "rhel-7-els.els:libgfortran", "rhel-7-els.els:libgfortran-static", "rhel-7-els.els:libgnat", "rhel-7-els.els:libgnat-devel", "rhel-7-els.els:libgnat-static", "rhel-7-els.els:libgo", "rhel-7-els.els:libgo-devel", "rhel-7-els.els:libgo-static", "rhel-7-els.els:libgomp", "rhel-7-els.els:libitm", "rhel-7-els.els:libitm-devel", "rhel-7-els.els:libitm-static", "rhel-7-els.els:libmudflap", "rhel-7-els.els:libmudflap-devel", "rhel-7-els.els:libmudflap-static", "rhel-7-els.els:libobjc", "rhel-7-els.els:libquadmath", "rhel-7-els.els:libquadmath-devel", "rhel-7-els.els:libquadmath-static", "rhel-7-els.els:libstdc++", "rhel-7-els.els:libstdc++-devel", "rhel-7-els.els:libstdc++-docs", "rhel-7-els.els:libstdc++-static", "rhel-7-els.els:libtsan", "rhel-7-els.els:libtsan-static" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "rhel-5.11.z.els:gcc.src", "rhel-5.11.z.els:gcc44.src", "rhel-6-els.els:compat-libgfortran-41", "rhel-6-els.els:compat-libgfortran-41-debuginfo", "rhel-6-els.els:compat-libgfortran-41.src", "rhel-6-els.els:cpp", "rhel-6-els.els:gcc", "rhel-6-els.els:gcc-c++", "rhel-6-els.els:gcc-debuginfo", "rhel-6-els.els:gcc-gfortran", "rhel-6-els.els:gcc-gnat", "rhel-6-els.els:gcc-java", "rhel-6-els.els:gcc-objc", "rhel-6-els.els:gcc-objc++", "rhel-6-els.els:gcc.src", "rhel-6-els.els:libatomic", "rhel-6-els.els:libgcc", "rhel-6-els.els:libgcj", "rhel-6-els.els:libgcj-devel", "rhel-6-els.els:libgcj-src", "rhel-6-els.els:libgfortran", "rhel-6-els.els:libgnat", "rhel-6-els.els:libgnat-devel", "rhel-6-els.els:libgomp", "rhel-6-els.els:libitm", "rhel-6-els.els:libmudflap", "rhel-6-els.els:libmudflap-devel", "rhel-6-els.els:libobjc", "rhel-6-els.els:libquadmath", "rhel-6-els.els:libstdc++", "rhel-6-els.els:libstdc++-devel", "rhel-6-els.els:libstdc++-docs", "rhel-7-els.els:compat-libgfortran-41", "rhel-7-els.els:compat-libgfortran-41-debuginfo", "rhel-7-els.els:compat-libgfortran-41.src", "rhel-7-els.els:cpp", "rhel-7-els.els:gcc", "rhel-7-els.els:gcc-base-debuginfo", "rhel-7-els.els:gcc-c++", "rhel-7-els.els:gcc-debuginfo", "rhel-7-els.els:gcc-gfortran", "rhel-7-els.els:gcc-gnat", "rhel-7-els.els:gcc-go", "rhel-7-els.els:gcc-objc", "rhel-7-els.els:gcc-objc++", "rhel-7-els.els:gcc-plugin-devel", "rhel-7-els.els:gcc.src", "rhel-7-els.els:libasan", "rhel-7-els.els:libasan-static", "rhel-7-els.els:libatomic", "rhel-7-els.els:libatomic-static", "rhel-7-els.els:libgcc", "rhel-7-els.els:libgfortran", "rhel-7-els.els:libgfortran-static", "rhel-7-els.els:libgnat", "rhel-7-els.els:libgnat-devel", "rhel-7-els.els:libgnat-static", "rhel-7-els.els:libgo", "rhel-7-els.els:libgo-devel", "rhel-7-els.els:libgo-static", "rhel-7-els.els:libgomp", "rhel-7-els.els:libitm", "rhel-7-els.els:libitm-devel", "rhel-7-els.els:libitm-static", "rhel-7-els.els:libmudflap", "rhel-7-els.els:libmudflap-devel", "rhel-7-els.els:libmudflap-static", "rhel-7-els.els:libobjc", "rhel-7-els.els:libquadmath", "rhel-7-els.els:libquadmath-devel", "rhel-7-els.els:libquadmath-static", "rhel-7-els.els:libstdc++", "rhel-7-els.els:libstdc++-devel", "rhel-7-els.els:libstdc++-docs", "rhel-7-els.els:libstdc++-static", "rhel-7-els.els:libtsan", "rhel-7-els.els:libtsan-static" ] } ], "title": "integer overflow flaws in libgfortran" } ] }