CVE-2024-3049: Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

First published: Thu Mar 28 2024(Updated: )

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/title
• agent/type
• agent/description
• agent/first-publish-date
• agent/author
• agent/event
• agent/softwarecombine
• agent/severity
• agent/references
• agent/tags
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2024-3049
• agent/software-canonical-lookup
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• collector/nvd-api
• source/NVD
• package-manager/redhat
• vendor/clusterlabs
• canonical/clusterlabs booth
• vendor/redhat
• canonical/redhat enterprise linux
• version/redhat enterprise linux/7.0
• version/redhat enterprise linux/8.0
• version/redhat enterprise linux/9.0
• canonical/redhat enterprise linux eus
• version/redhat enterprise linux eus/8.4
• version/redhat enterprise linux eus/8.8
• version/redhat enterprise linux eus/9.2
• canonical/redhat enterprise linux for arm 64
• version/redhat enterprise linux for arm 64/8.0_aarch64
• version/redhat enterprise linux for arm 64/8.8_aarch64
• version/redhat enterprise linux for arm 64/9.2_aarch64
• version/redhat enterprise linux for arm 64/9.4_aarch64
• canonical/redhat enterprise linux for ibm z systems
• version/redhat enterprise linux for ibm z systems/8.0_s390x
• version/redhat enterprise linux for ibm z systems/9.2_s390x
• version/redhat enterprise linux for ibm z systems/9.4_s390x
• canonical/redhat enterprise linux for ibm z systems eus
• version/redhat enterprise linux for ibm z systems eus/8.8_s390x
• canonical/redhat enterprise linux for power little endian eus
• version/redhat enterprise linux for power little endian eus/8.0_ppc64le
• version/redhat enterprise linux for power little endian eus/8.4_ppc64le
• version/redhat enterprise linux for power little endian eus/8.8_ppc64le
• version/redhat enterprise linux for power little endian eus/9.2_ppc64le
• version/redhat enterprise linux for power little endian eus/9.4_ppc64le
• canonical/redhat enterprise linux server update services for sap solutions
• version/redhat enterprise linux server update services for sap solutions/8.4