Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2014-5044

critical

CVE-2014-5044

gcc: integer overflow flaws in libgfortran

Published Modified CWE 190
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), Ubuntu (low).

Description

Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.

Affected packages and fixed versions

SourcePackageFixed in
debian 7gcc-4.4, gcc-4.6, gcc-4.7no fix listed
rapidfort ubuntu 20.04gcc-mingw-w640:13.2.0-6ubuntu1+26.1
rapidfort ubuntu 22.04gcc-mingw-w640:13.2.0-6ubuntu1+26.1
rapidfort ubuntu 24.04gcc-mingw-w640:13.2.0-6ubuntu1+26.1
Red Hatcompat-libgfortran-41, cpp, gcc and 41 moreno fix listed
ubuntu 14.04gcc-4.8, gcc-4.8-arm64-cross, gcc-4.8-armhf-cross4.8.4-2ubuntu1~14.04 and 1 more
ubuntu 14.04-ESMgcc-4.84.8.4-2ubuntu1~14.04
ubuntu 16.04gcc-4.94.9.1-4ubuntu1
ubuntu 16.04-ESMgcc-4.94.9.1-4ubuntu1
Show all 56 entries from 9 sources
SourcePackageFixed in
debian 7gcc-4.4no fix listed
debian 7gcc-4.6no fix listed
debian 7gcc-4.7no fix listed
rapidfort ubuntu 20.04gcc-mingw-w640:13.2.0-6ubuntu1+26.1
rapidfort ubuntu 22.04gcc-mingw-w640:13.2.0-6ubuntu1+26.1
rapidfort ubuntu 24.04gcc-mingw-w640:13.2.0-6ubuntu1+26.1
Red Hatcompat-libgfortran-41no fix listed
Red Hatcppno fix listed
Red Hatgccno fix listed
Red Hatgcc-c++no fix listed
Red Hatgcc-gfortranno fix listed
Red Hatgcc-gnatno fix listed
Red Hatgcc-gono fix listed
Red Hatgcc-javano fix listed
Red Hatgcc-objcno fix listed
Red Hatgcc-objc++no fix listed
Red Hatgcc-plugin-develno fix listed
Red Hatlibasanno fix listed
Red Hatlibasan-staticno fix listed
Red Hatlibatomicno fix listed
Red Hatlibatomic-staticno fix listed
Red Hatlibgccno fix listed
Red Hatlibgcjno fix listed
Red Hatlibgcj-develno fix listed
Red Hatlibgcj-srcno fix listed
Red Hatlibgfortranno fix listed
Red Hatlibgfortran-staticno fix listed
Red Hatlibgnatno fix listed
Red Hatlibgnat-develno fix listed
Red Hatlibgnat-staticno fix listed
Red Hatlibgono fix listed
Red Hatlibgo-develno fix listed
Red Hatlibgo-staticno fix listed
Red Hatlibgompno fix listed
Red Hatlibitmno fix listed
Red Hatlibitm-develno fix listed
Red Hatlibitm-staticno fix listed
Red Hatlibmudflapno fix listed
Red Hatlibmudflap-develno fix listed
Red Hatlibmudflap-staticno fix listed
Red Hatlibobjcno fix listed
Red Hatlibquadmathno fix listed
Red Hatlibquadmath-develno fix listed
Red Hatlibquadmath-staticno fix listed
Red Hatlibstdc++no fix listed
Red Hatlibstdc++-develno fix listed
Red Hatlibstdc++-docsno fix listed
Red Hatlibstdc++-staticno fix listed
Red Hatlibtsanno fix listed
Red Hatlibtsan-staticno fix listed
ubuntu 14.04gcc-4.84.8.4-2ubuntu1~14.04
ubuntu 14.04gcc-4.8-arm64-cross0.11.1
ubuntu 14.04gcc-4.8-armhf-cross0.11.1
ubuntu 14.04-ESMgcc-4.84.8.4-2ubuntu1~14.04
ubuntu 16.04gcc-4.94.9.1-4ubuntu1
ubuntu 16.04-ESMgcc-4.94.9.1-4ubuntu1

References

All 10 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.