rpm package
almalinux/booth-arbitrator
pkg:rpm/almalinux/booth-arbitrator
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-3049 | Med | 5.9 | < 1.1-1.el8_10.1 | 1.1-1.el8_10.1 | Jun 6, 2024 | A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server. | |
| CVE-2022-2553 | Med | 6.5 | < 1.0-199.1.ac1d34c.git.el8_6.1 | 1.0-199.1.ac1d34c.git.el8_6.1 | Jul 28, 2022 | The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster. |
- affected < 1.1-1.el8_10.1fixed 1.1-1.el8_10.1
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
- affected < 1.0-199.1.ac1d34c.git.el8_6.1fixed 1.0-199.1.ac1d34c.git.el8_6.1
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.