← Back

Booth

booth

Vendor: Clusterlabs • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-3049
2Clusterlabs
Redhat
8Booth
Enterprise LinuxEnterprise Linux Eus+5 more
Jun 17, 2026
Jun 6, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
CVE-2022-2553
3Clusterlabs
DebianFedoraproject
3Booth
Debian LinuxFedora
Jun 17, 2026
Jul 28, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from...Show more
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.Show less