#VU97632 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Linux target framework (tgt) - CVE-2024-45751
Published: September 20, 2024
Vulnerability identifier: #VU97632
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2024-45751
CWE-ID: CWE-338
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerable software:
Linux target framework (tgt)
Linux target framework (tgt)
Software vendor:
FUJITA Tomonori
FUJITA Tomonori
Description
The vulnerability allows a remote attacker to bypass CHAP authentication.
The vulnerability exists due to the application attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.This results in predictable challenges which an attacker capable of recording network traffic between iSCSI target and initiator can abuse to bypass CHAP authentication by replaying previous responses.
Remediation
Install updates from vendor's website.