CVEvulnerability
CVE-2024-36048
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2024-05-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-335
Description
QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.
Affected configurations
• qt qt (< 5.15.17)
• qt qt (>= 6.0.0 < 6.2.13)
• qt qt (>= 6.3.0 < 6.5.6)
• qt qt (>= 6.6.0 < 6.7.1)
• fedoraproject fedora 39
• fedoraproject fedora 40
Related
Weakness · CWE (1)
- CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) weakness
References
- https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560317 Patch
- https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560368 Patch
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/ Third Party Advisory
- https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560317 Patch
- https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560368 Patch
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/ lists.fedoraproject.org