CVE-2024-45751

MEDIUM

tgt < 1.0.93 - Use of Cryptographically Weak PRNG via Unseeded rand

Title source: llm
STIX 2.1

Description

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.

References (5)

Core 5

Scores

CVSS v3 5.9
EPSS 0.0055
EPSS Percentile 41.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-338
Status published
Published Sep 06, 2024
Tracked Since Feb 18, 2026