NetSight
IP …
medium5.9

CVE-2024-3049

A flaw was found in Booth, a cluster ticket manager.

Impact

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Affected products

VendorProductAffected versions
ClusterlabsBooth
before 1.1
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.4, 8.8, 9.2
RedhatEnterprise Linux For Arm 64
Versions 8.0_aarch64, 8.8_aarch64, 9.2_aarch64, 9.4_aarch64
RedhatEnterprise Linux For Ibm Z Systems
Versions 8.0_s390x, 9.2_s390x, 9.4_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus
Version 8.8_s390x
RedhatEnterprise Linux For Power Little Endian Eus
Versions 8.0_ppc64le, 8.4_ppc64le, 8.8_ppc64le, 9.2_ppc64le, 9.4_ppc64le
RedhatEnterprise Linux Server Update Services For Sap Solutions
Version 8.4

Weakness classification

CWE-345

References