OESA-2024-2156

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2156

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-2156.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2024-2156

Upstream

CVE-2024-45751

Published

2024-09-20T11:09:10Z

Modified

2025-09-03T06:20:29.727798Z

Summary

scsi-target-utils security update

Details

The SCSI target package contains the daemon and tools to setup a SCSI targets. Currently, software iSCSI targets are supported.

Security Fix(es):

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.(CVE-2024-45751)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP4

scsi-target-utils

Package

Name: scsi-target-utils
Purl: pkg:rpm/openEuler/scsi-target-utils&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.79-5.oe2003sp4

Ecosystem specific

{
    "aarch64": [
        "scsi-target-utils-1.0.79-5.oe2003sp4.aarch64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-5.oe2003sp4.aarch64.rpm",
        "scsi-target-utils-debugsource-1.0.79-5.oe2003sp4.aarch64.rpm",
        "scsi-target-utils-gluster-1.0.79-5.oe2003sp4.aarch64.rpm",
        "scsi-target-utils-rbd-1.0.79-5.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "scsi-target-utils-1.0.79-5.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "scsi-target-utils-help-1.0.79-5.oe2003sp4.noarch.rpm"
    ],
    "x86_64": [
        "scsi-target-utils-1.0.79-5.oe2003sp4.x86_64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-5.oe2003sp4.x86_64.rpm",
        "scsi-target-utils-debugsource-1.0.79-5.oe2003sp4.x86_64.rpm",
        "scsi-target-utils-gluster-1.0.79-5.oe2003sp4.x86_64.rpm",
        "scsi-target-utils-rbd-1.0.79-5.oe2003sp4.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP1

scsi-target-utils

Package

Name: scsi-target-utils
Purl: pkg:rpm/openEuler/scsi-target-utils&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.79-6.oe2203sp1

Ecosystem specific

{
    "aarch64": [
        "scsi-target-utils-1.0.79-6.oe2203sp1.aarch64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-6.oe2203sp1.aarch64.rpm",
        "scsi-target-utils-debugsource-1.0.79-6.oe2203sp1.aarch64.rpm",
        "scsi-target-utils-gluster-1.0.79-6.oe2203sp1.aarch64.rpm",
        "scsi-target-utils-rbd-1.0.79-6.oe2203sp1.aarch64.rpm"
    ],
    "src": [
        "scsi-target-utils-1.0.79-6.oe2203sp1.src.rpm"
    ],
    "noarch": [
        "scsi-target-utils-help-1.0.79-6.oe2203sp1.noarch.rpm"
    ],
    "x86_64": [
        "scsi-target-utils-1.0.79-6.oe2203sp1.x86_64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-6.oe2203sp1.x86_64.rpm",
        "scsi-target-utils-debugsource-1.0.79-6.oe2203sp1.x86_64.rpm",
        "scsi-target-utils-gluster-1.0.79-6.oe2203sp1.x86_64.rpm",
        "scsi-target-utils-rbd-1.0.79-6.oe2203sp1.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP3

scsi-target-utils

Package

Name: scsi-target-utils
Purl: pkg:rpm/openEuler/scsi-target-utils&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.79-6.oe2203sp3

Ecosystem specific

{
    "aarch64": [
        "scsi-target-utils-1.0.79-6.oe2203sp3.aarch64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-6.oe2203sp3.aarch64.rpm",
        "scsi-target-utils-debugsource-1.0.79-6.oe2203sp3.aarch64.rpm",
        "scsi-target-utils-gluster-1.0.79-6.oe2203sp3.aarch64.rpm",
        "scsi-target-utils-rbd-1.0.79-6.oe2203sp3.aarch64.rpm"
    ],
    "src": [
        "scsi-target-utils-1.0.79-6.oe2203sp3.src.rpm"
    ],
    "noarch": [
        "scsi-target-utils-help-1.0.79-6.oe2203sp3.noarch.rpm"
    ],
    "x86_64": [
        "scsi-target-utils-1.0.79-6.oe2203sp3.x86_64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-6.oe2203sp3.x86_64.rpm",
        "scsi-target-utils-debugsource-1.0.79-6.oe2203sp3.x86_64.rpm",
        "scsi-target-utils-gluster-1.0.79-6.oe2203sp3.x86_64.rpm",
        "scsi-target-utils-rbd-1.0.79-6.oe2203sp3.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP4

scsi-target-utils

Package

Name: scsi-target-utils
Purl: pkg:rpm/openEuler/scsi-target-utils&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.79-6.oe2203sp4

Ecosystem specific

{
    "aarch64": [
        "scsi-target-utils-1.0.79-6.oe2203sp4.aarch64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-6.oe2203sp4.aarch64.rpm",
        "scsi-target-utils-debugsource-1.0.79-6.oe2203sp4.aarch64.rpm",
        "scsi-target-utils-gluster-1.0.79-6.oe2203sp4.aarch64.rpm",
        "scsi-target-utils-rbd-1.0.79-6.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "scsi-target-utils-1.0.79-6.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "scsi-target-utils-help-1.0.79-6.oe2203sp4.noarch.rpm"
    ],
    "x86_64": [
        "scsi-target-utils-1.0.79-6.oe2203sp4.x86_64.rpm",
        "scsi-target-utils-debuginfo-1.0.79-6.oe2203sp4.x86_64.rpm",
        "scsi-target-utils-debugsource-1.0.79-6.oe2203sp4.x86_64.rpm",
        "scsi-target-utils-gluster-1.0.79-6.oe2203sp4.x86_64.rpm",
        "scsi-target-utils-rbd-1.0.79-6.oe2203sp4.x86_64.rpm"
    ]
}

openEuler:24.03-LTS

scsi-target-utils

Package

Name: scsi-target-utils
Purl: pkg:rpm/openEuler/scsi-target-utils&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.91-2.oe2403

Ecosystem specific

{
    "aarch64": [
        "scsi-target-utils-1.0.91-2.oe2403.aarch64.rpm",
        "scsi-target-utils-debuginfo-1.0.91-2.oe2403.aarch64.rpm",
        "scsi-target-utils-debugsource-1.0.91-2.oe2403.aarch64.rpm",
        "scsi-target-utils-gluster-1.0.91-2.oe2403.aarch64.rpm",
        "scsi-target-utils-rbd-1.0.91-2.oe2403.aarch64.rpm"
    ],
    "src": [
        "scsi-target-utils-1.0.91-2.oe2403.src.rpm"
    ],
    "noarch": [
        "scsi-target-utils-help-1.0.91-2.oe2403.noarch.rpm"
    ],
    "x86_64": [
        "scsi-target-utils-1.0.91-2.oe2403.x86_64.rpm",
        "scsi-target-utils-debuginfo-1.0.91-2.oe2403.x86_64.rpm",
        "scsi-target-utils-debugsource-1.0.91-2.oe2403.x86_64.rpm",
        "scsi-target-utils-gluster-1.0.91-2.oe2403.x86_64.rpm",
        "scsi-target-utils-rbd-1.0.91-2.oe2403.x86_64.rpm"
    ]
}