Orta CVSS 5.9

CVE-2024-3049: Booth: güvenlik açığı

Yayın: 6 Haziran 2024 09:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

Özet bilgiler

Ürün: Clusterlabs Booth
CVSS v3.1: 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS: %0,53 (yüzdelik 45)
CWE: CWE-345
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
clusterlabs-booth	—	—	1.1
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux-eus	8.4	8.4	—
redhat-enterprise-linux-eus	8.8	8.8	—
redhat-enterprise-linux-eus	9.2	9.2	—
redhat-enterprise-linux-for-arm-64	8.0_aarch64	8.0_aarch64	—
redhat-enterprise-linux-for-arm-64	8.8_aarch64	8.8_aarch64	—
redhat-enterprise-linux-for-arm-64	9.2_aarch64	9.2_aarch64	—
redhat-enterprise-linux-for-arm-64	9.4_aarch64	9.4_aarch64	—
redhat-enterprise-linux-for-ibm-z-systems	8.0_s390x	8.0_s390x	—
redhat-enterprise-linux-for-ibm-z-systems	9.2_s390x	9.2_s390x	—
redhat-enterprise-linux-for-ibm-z-systems	9.4_s390x	9.4_s390x	—
redhat-enterprise-linux-for-ibm-z-systems-eus	8.8_s390x	8.8_s390x	—
redhat-enterprise-linux-for-power-little-endian-eus	8.0_ppc64le	8.0_ppc64le	—
redhat-enterprise-linux-for-power-little-endian-eus	8.4_ppc64le	8.4_ppc64le	—
redhat-enterprise-linux-for-power-little-endian-eus	8.8_ppc64le	8.8_ppc64le	—
redhat-enterprise-linux-for-power-little-endian-eus	9.2_ppc64le	9.2_ppc64le	—
redhat-enterprise-linux-for-power-little-endian-eus	9.4_ppc64le	9.4_ppc64le	—
redhat-enterprise-linux-server-update-services-for-sap-solutions	8.4	8.4	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları