CVE-2024-36048

2024-05-1821:15:47

Debian Security Bug Tracker

security-tracker.debian.org

qt network authorization

prng

guessable values

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.

OSVersionArchitecturePackageVersionFilename
Debian12allqt6-networkauth<= 6.4.2-1qt6-networkauth_6.4.2-1_all.deb
Debian999allqt6-networkauth<= 6.6.2-2qt6-networkauth_6.6.2-2_all.deb
Debian13allqt6-networkauth<= 6.6.2-2qt6-networkauth_6.6.2-2_all.deb
Debian12allqtnetworkauth-everywhere-src<= 5.15.8-2qtnetworkauth-everywhere-src_5.15.8-2_all.deb
Debian11allqtnetworkauth-everywhere-src<= 5.15.2-2qtnetworkauth-everywhere-src_5.15.2-2_all.deb
Debian10allqtnetworkauth-everywhere-src<= 5.11.3-2qtnetworkauth-everywhere-src_5.11.3-2_all.deb
Debian999allqtnetworkauth-everywhere-src< 5.15.13-3qtnetworkauth-everywhere-src_5.15.13-3_all.deb
Debian13allqtnetworkauth-everywhere-src< 5.15.13-3qtnetworkauth-everywhere-src_5.15.13-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	qt6-networkauth	<= 6.4.2-1	qt6-networkauth_6.4.2-1_all.deb
Debian	999	all	qt6-networkauth	<= 6.6.2-2	qt6-networkauth_6.6.2-2_all.deb
Debian	13	all	qt6-networkauth	<= 6.6.2-2	qt6-networkauth_6.6.2-2_all.deb
Debian	12	all	qtnetworkauth-everywhere-src	<= 5.15.8-2	qtnetworkauth-everywhere-src_5.15.8-2_all.deb
Debian	11	all	qtnetworkauth-everywhere-src	<= 5.15.2-2	qtnetworkauth-everywhere-src_5.15.2-2_all.deb
Debian	10	all	qtnetworkauth-everywhere-src	<= 5.11.3-2	qtnetworkauth-everywhere-src_5.11.3-2_all.deb
Debian	999	all	qtnetworkauth-everywhere-src	< 5.15.13-3	qtnetworkauth-everywhere-src_5.15.13-3_all.deb
Debian	13	all	qtnetworkauth-everywhere-src	< 5.15.13-3	qtnetworkauth-everywhere-src_5.15.13-3_all.deb