CVE catalog

CVE-2024-45751

tgt vulnerability

Severity: Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Published: Sep 6, 2024, 5:15:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.55% · Oct 25, 2026

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	tgt	sid	`1:1.0.85-1.3`	fixed
Debian	tgt	forky	`1:1.0.85-1.3`	fixed
Debian	tgt	trixie	`1:1.0.85-1.3`	fixed
Debian	tgt	bookworm	`1:1.0.85-1+deb12u1`	fixed
Ubuntu	tgt	noble	`1:1.0.85-1.1ubuntu6+esm1`	fixed
Ubuntu	tgt-glusterfs	noble	`1:1.0.85-1.1ubuntu6+esm1`	fixed
Ubuntu	tgt-rbd	noble	`1:1.0.85-1.1ubuntu6+esm1`	fixed
Ubuntu	tgt	pro	`1:1.0.85-1ubuntu1`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu2`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu3`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu4`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu6`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu6+esm1`	fixed
Ubuntu	tgt	pro	`1:1.0.85-1ubuntu1`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu2`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu3`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu4`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu6`	vulnerable
Ubuntu	tgt	pro	`1:1.0.85-1.1ubuntu6+esm1`	fixed
Ubuntu	iscsitarget	16.04	`1.4.20.3+svn502-2ubuntu2`	vulnerable
Ubuntu	iscsitarget	16.04	`1.4.20.3+svn502-2ubuntu4`	vulnerable
Ubuntu	iscsitarget	16.04	`1.4.20.3+svn502-2ubuntu4.1`	vulnerable
Ubuntu	iscsitarget	16.04	`1.4.20.3+svn502-2ubuntu4.3`	vulnerable
Ubuntu	iscsitarget	16.04	`1.4.20.3+svn502-2ubuntu4.4`	vulnerable
Ubuntu	iscsitarget	16.04	`1.4.20.3+svn502-2ubuntu4.5`	vulnerable
Ubuntu	tgt	20.04	`1:1.0.79-2ubuntu1`	vulnerable
Ubuntu	tgt	20.04	`1:1.0.79-2ubuntu1.1`	fixed
Ubuntu	tgt	20.04	`1:1.0.79-2ubuntu1`	vulnerable
Ubuntu	tgt	20.04	`1:1.0.79-2ubuntu1.1`	fixed
Suse	tgt	linux enterprise module for basesystem 15 sp6	`1.0.85-150600.10.3.1`	fixed
Suse	tgt	linux enterprise module for basesystem 15 sp7	`1.0.85-150600.10.3.1`	fixed
Opensuse	tgt	leap 15.6	`1.0.85-150600.10.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	tgt	source	sid	`1:1.0.85-1.3`	not yet assigned	Not reported	[1081158]
Debian	tgt	source	forky	`1:1.0.85-1.3`	not yet assigned	Not reported	[1081158]
Debian	tgt	source	trixie	`1:1.0.85-1.3`	not yet assigned	Not reported	[1081158]
Debian	tgt	source	bookworm	`1:1.0.85-1+deb12u1`	not yet assigned	Not reported	[1081158]
Ubuntu	tgt	deb	noble	`1:1.0.85-1.1ubuntu6+esm1`	Not reported	Not reported	Not reported
Ubuntu	tgt-glusterfs	deb	noble	`1:1.0.85-1.1ubuntu6+esm1`	Not reported	Not reported	Not reported
Ubuntu	tgt-rbd	deb	noble	`1:1.0.85-1.1ubuntu6+esm1`	Not reported	Not reported	Not reported
Ubuntu	tgt	deb	pro	`1:1.0.85-1.1ubuntu6+esm1`	Not reported	USN-8325-1	Not reported
Ubuntu	tgt	deb	pro	`1:1.0.85-1.1ubuntu6+esm1`	Not reported	UBUNTU-CVE-2024-45751	Not reported
Ubuntu	tgt	deb	20.04	`1:1.0.79-2ubuntu1.1`	Not reported	UBUNTU-CVE-2024-45751	Not reported
Ubuntu	tgt	deb	20.04	`1:1.0.79-2ubuntu1.1`	Not reported	USN-7024-1	Not reported
Suse	tgt	rpm	linux enterprise module for basesystem 15 sp6	`1.0.85-150600.10.3.1`	Not reported	SUSE-SU-2025:02740-1	Not reported
Suse	tgt	rpm	linux enterprise module for basesystem 15 sp7	`1.0.85-150600.10.3.1`	Not reported	SUSE-SU-2025:02740-1	Not reported
Opensuse	tgt	rpm	leap 15.6	`1.0.85-150600.10.3.1`	Not reported	SUSE-SU-2025:02740-1	Not reported

[Debian bug #1081158]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[tgt]Fixed
Details (2)
- 1:1.0.85-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1:1.0.85-1+deb12u1
  usn · tgt · debian · bookworm; usn · tgt · debian · 12
- 1:1.0.85-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1:1.0.85-1+deb12u1
  usn · tgt · debian · bookworm; usn · tgt · debian · 12
[tgt-glusterfs]Fixed
Source package: [tgt]
Details (2)
- 1:1.0.85-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1:1.0.85-1+deb12u1
  usn · tgt · debian · bookworm; usn · tgt · debian · 12
- 1:1.0.85-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1:1.0.85-1+deb12u1
  usn · tgt · debian · bookworm; usn · tgt · debian · 12
[tgt-rbd]Fixed
Source package: [tgt]
Details (2)
- 1:1.0.85-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1:1.0.85-1+deb12u1
  usn · tgt · debian · bookworm; usn · tgt · debian · 12
- 1:1.0.85-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1:1.0.85-1+deb12u1
  usn · tgt · debian · bookworm; usn · tgt · debian · 12

[Debian 13 (Trixie)]

[tgt]Fixed
Details (2)
- 1:1.0.85-1.3 · amd64 · trixie
  Fixed · Fixed: 1:1.0.85-1.3
  usn · tgt · debian · 13
- 1:1.0.85-1.3 · arm64 · trixie
  Fixed · Fixed: 1:1.0.85-1.3
  usn · tgt · debian · 13
[tgt-glusterfs]Fixed
Source package: [tgt]
Details (2)
- 1:1.0.85-1.3 · amd64 · trixie
  Fixed · Fixed: 1:1.0.85-1.3
  usn · tgt · debian · 13
- 1:1.0.85-1.3 · arm64 · trixie
  Fixed · Fixed: 1:1.0.85-1.3
  usn · tgt · debian · 13
[tgt-rbd]Fixed
Source package: [tgt]
Details (2)
- 1:1.0.85-1.3 · amd64 · trixie
  Fixed · Fixed: 1:1.0.85-1.3
  usn · tgt · debian · 13
- 1:1.0.85-1.3 · arm64 · trixie
  Fixed · Fixed: 1:1.0.85-1.3
  usn · tgt · debian · 13

Observed: Oct 27, 2026, 2:10:03 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]