1. Home
  2. CVE Database
  3. CVE-2024-3049
MEDIUM · 5.9

CVE-2024-3049

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Vulnerability Description

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
ClusterlabsBooth< 1.1
RedhatEnterprise Linux7.0
RedhatEnterprise Linux Eus8.4
RedhatEnterprise Linux For Arm 648.0_aarch64
RedhatEnterprise Linux For Ibm Z Systems8.0_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus8.8_s390x
RedhatEnterprise Linux For Power Little Endian Eus8.0_ppc64le
RedhatEnterprise Linux Server Update Services For Sap Solutions8.4

Related Weaknesses (CWE)

CWE-345

References

FAQ

What is CVE-2024-3049?

CVE-2024-3049 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

How severe is CVE-2024-3049?

CVE-2024-3049 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-3049?

Check the references section above for vendor advisories and patch information. Affected products include: Clusterlabs Booth, Redhat Enterprise Linux, Redhat Enterprise Linux Eus, Redhat Enterprise Linux For Arm 64, Redhat Enterprise Linux For Ibm Z Systems.