CVE-2024-45751

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequ...

Original description

The description as published by the source.

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-45751 tgt Fixed in: 1:1.0.80-1+deb11u1
Ubuntu UBUNTU-CVE-2024-45751 tgt

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web openwall.com
web github.com
web lists.debian.org
web openwall.com