{"id":"USN-8325-1","summary":"tgt vulnerability","details":"It was discovered that tgt incorrectly tried to achieve entropy by calling\nrand without srand. An attacker could possibly use this issue to make tgt\ngenerate an identical sequence of challenges, resulting in authentication\nbypass.","modified":"2026-05-27T18:14:02.588373198Z","published":"2026-05-27T15:01:27Z","related":["UBUNTU-CVE-2024-45751"],"upstream":["CVE-2024-45751","UBUNTU-CVE-2024-45751"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8325-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-45751"}],"affected":[{"package":{"name":"tgt","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/tgt?arch=source&distro=esm-infra-legacy%2Ftrusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.43-0ubuntu4.1~14.04.3+esm1"}]}],"versions":["1:1.0.38-0ubuntu1","1:1.0.41-0ubuntu1","1:1.0.43-0ubuntu1","1:1.0.43-0ubuntu2","1:1.0.43-0ubuntu4","1:1.0.43-0ubuntu4.1~14.04.1","1:1.0.43-0ubuntu4.1~14.04.2","1:1.0.43-0ubuntu4.1~14.04.3"],"ecosystem_specific":{"binaries":[{"binary_name":"tgt","binary_version":"1:1.0.43-0ubuntu4.1~14.04.3+esm1"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-45751","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:14.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8325-1.json"}},{"package":{"name":"tgt","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/tgt?arch=source&distro=esm-infra-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.63-1ubuntu1.1+esm1"}]}],"versions":["1:1.0.57-1ubuntu2","1:1.0.62-1ubuntu1","1:1.0.62-1ubuntu2","1:1.0.63-1ubuntu1","1:1.0.63-1ubuntu1.1"],"ecosystem_specific":{"binaries":[{"binary_name":"tgt","binary_version":"1:1.0.63-1ubuntu1.1+esm1"},{"binary_name":"tgt-rbd","binary_version":"1:1.0.63-1ubuntu1.1+esm1"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-45751","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:16.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8325-1.json"}},{"package":{"name":"tgt","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/tgt?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.72-1ubuntu1+esm1"}]}],"versions":["1:1.0.71-1ubuntu1","1:1.0.71-1ubuntu2","1:1.0.72-1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"tgt","binary_version":"1:1.0.72-1ubuntu1+esm1"},{"binary_name":"tgt-rbd","binary_version":"1:1.0.72-1ubuntu1+esm1"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"id":"CVE-2024-45751","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8325-1.json"}},{"package":{"name":"tgt","ecosystem":"Ubuntu:Pro:22.04:LTS","purl":"pkg:deb/ubuntu/tgt?arch=source&distro=esm-apps%2Fjammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.80-1ubuntu2+esm1"}]}],"versions":["1:1.0.80-1ubuntu1","1:1.0.80-1ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"tgt","binary_version":"1:1.0.80-1ubuntu2+esm1"},{"binary_name":"tgt-glusterfs","binary_version":"1:1.0.80-1ubuntu2+esm1"},{"binary_name":"tgt-rbd","binary_version":"1:1.0.80-1ubuntu2+esm1"}],"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-45751","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:22.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8325-1.json"}},{"package":{"name":"tgt","ecosystem":"Ubuntu:Pro:24.04:LTS","purl":"pkg:deb/ubuntu/tgt?arch=source&distro=esm-apps%2Fnoble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.85-1.1ubuntu6+esm1"}]}],"versions":["1:1.0.85-1ubuntu1","1:1.0.85-1.1ubuntu2","1:1.0.85-1.1ubuntu3","1:1.0.85-1.1ubuntu4","1:1.0.85-1.1ubuntu6"],"ecosystem_specific":{"binaries":[{"binary_name":"tgt","binary_version":"1:1.0.85-1.1ubuntu6+esm1"},{"binary_name":"tgt-glusterfs","binary_version":"1:1.0.85-1.1ubuntu6+esm1"},{"binary_name":"tgt-rbd","binary_version":"1:1.0.85-1.1ubuntu6+esm1"}],"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-45751","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8325-1.json"}}],"schema_version":"1.7.5"}