CVE-2024-45751

2024-09-0605:15:13

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-45751

linux target framework

security vulnerability

AI Score

6.7

Confidence

Low

EPSS

Percentile

16.4%

JSON

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.

OSVersionArchitecturePackageVersionFilename
Debian12alltgt<= 1:1.0.85-1tgt_1:1.0.85-1_all.deb
Debian11alltgt<= 1:1.0.80-1tgt_1:1.0.80-1_all.deb
Debian999alltgt< 1:1.0.85-1.3tgt_1:1.0.85-1.3_all.deb
Debian13alltgt<= 1:1.0.85-1.2tgt_1:1.0.85-1.2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	tgt	<= 1:1.0.85-1	tgt_1:1.0.85-1_all.deb
Debian	11	all	tgt	<= 1:1.0.80-1	tgt_1:1.0.80-1_all.deb
Debian	999	all	tgt	< 1:1.0.85-1.3	tgt_1:1.0.85-1.3_all.deb
Debian	13	all	tgt	<= 1:1.0.85-1.2	tgt_1:1.0.85-1.2_all.deb