CVE-2024-3049

Published: Jun 6, 2024

Modified: Mar 17, 2026

PUBLISHED

CVSS v3.1

5.9

MEDIUM

Description

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Vendor	Product	Versions
Unknown	booth	affected `1.0-283.1`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:1.1-1.el8_10.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected `0:1.0-199.1.ac1d34c.git.el8_4.2 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `0:1.0-199.1.ac1d34c.git.el8_4.2 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	unaffected `0:1.0-199.1.ac1d34c.git.el8_4.2 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected `0:1.0-199.1.ac1d34c.git.el8_6.2 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	unaffected `0:1.0-199.1.ac1d34c.git.el8_6.2 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected `0:1.0-283.1.9d4029a.git.el8_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:1.1-1.el9_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	unaffected `0:1.0-251.3.bfb2f92.git.el9_0.2 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:1.0-283.1.9d4029a.git.el9_2.1 - < *`
Red Hat	Red Hat Enterprise Linux 10	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions