CVE-2024-3049
06.06.2024, 06:15
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.Enginsight
| Vendor | Product | Version |
|---|---|---|
| clusterlabs | booth | 𝑥 < 1.1 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux_eus | 8.4 |
| redhat | enterprise_linux_eus | 8.8 |
| redhat | enterprise_linux_eus | 9.2 |
| redhat | enterprise_linux_for_arm_64 | 8.0_aarch64:_aarch64 |
| redhat | enterprise_linux_for_arm_64 | 8.8_aarch64:_aarch64 |
| redhat | enterprise_linux_for_arm_64 | 9.2_aarch64:_aarch64 |
| redhat | enterprise_linux_for_arm_64 | 9.4_aarch64:_aarch64 |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0_s390x:_s390x |
| redhat | enterprise_linux_for_ibm_z_systems | 9.2_s390x:_s390x |
| redhat | enterprise_linux_for_ibm_z_systems | 9.4_s390x:_s390x |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.8_s390x:_s390x |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.0_ppc64le:_ppc64le |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.4_ppc64le:_ppc64le |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.8_ppc64le:_ppc64le |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.2_ppc64le:_ppc64le |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.4_ppc64le:_ppc64le |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | 8.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References