CVE-2024-3049

CVSS V2 None CVSS V3 None
Description
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
Overview
  • CVE ID
  • CVE-2024-3049
  • Assigner
  • redhat
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-06-06T05:30:04.137Z
  • Last Modified Date
  • 2024-06-18T12:26:52.459Z
Weakness Enumerations
CWE URL
CWE-345 http://cwe.mitre.org/data/definitions/345.html
References
Reference URL Reference Tags
https://access.redhat.com/errata/RHSA-2024:3657 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3658 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3659 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3660 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3661 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-3049 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2272082 issue-tracking x_refsource_REDHAT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERCFM3HXFJKLEMMWU3CZLPKH5LZAEDAN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPK5BHYOB7CFFRQAN55YV5LH44PWHMQD/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-3049
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3049
History
Created Old Value New Value Data Type Notes
2024-06-23 23:01:22 Added to TrackCVE