← CVE Intelligence

CVE-2024-3049

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server PUBLISHED

Description (CNA)

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 1.0-283.1
Red Hat / Red Hat Enterprise Linux 8unaffected 0:1.1-1.el8_10.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:1.0-199.1.ac1d34c.git.el8_4.2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:1.0-199.1.ac1d34c.git.el8_4.2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 0:1.0-199.1.ac1d34c.git.el8_4.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:1.0-199.1.ac1d34c.git.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:1.0-199.1.ac1d34c.git.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:1.0-283.1.9d4029a.git.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:1.1-1.el9_4.1 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:1.0-251.3.bfb2f92.git.el9_0.2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:1.0-283.1.9d4029a.git.el9_2.1 before *
Red Hat / Red Hat Enterprise Linux 10unknown
Red Hat / Red Hat Enterprise Linux 7affected

CWE

CWE-345

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.