Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-36048

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.

Published

2024-05-18T21:15:47.673

Last Modified

2025-06-30T15:21:31.767

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-335

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	qt	qt	< 5.15.17	Yes
Application	qt	qt	< 6.2.13	Yes
Application	qt	qt	< 6.5.6	Yes
Application	qt	qt	< 6.7.1	Yes
Operating System	fedoraproject	fedora	39	Yes
Operating System	fedoraproject	fedora	40	Yes

References

https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560317 Patch ([email protected])
https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560368 Patch ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/ Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/ Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/ Third Party Advisory ([email protected])
https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560317 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560368 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)