Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-3049

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Booth Enterprise Linux Enterprise Linux Eus and 10 more
CVE-2022-2553

booth: authfile directive in booth config file is completely ignored.

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Clusterlabs Debian Fedoraproject and 1 more
Products
Booth Debian Linux Fedora and 2 more