{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-3049", "ASSIGNER": "secalert@redhat.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Insufficient Verification of Data Authenticity", "cweId": "CWE-345" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Red Hat", "product": { "product_data": [ { "product_name": "Red Hat Enterprise Linux 8", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.1-1.el8_10.1", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-199.1.ac1d34c.git.el8_4.2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-199.1.ac1d34c.git.el8_4.2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-199.1.ac1d34c.git.el8_6.2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-199.1.ac1d34c.git.el8_6.2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 8.8 Extended Update Support", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-283.1.9d4029a.git.el8_8.1", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 9", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.1-1.el9_4.1", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-251.3.bfb2f92.git.el9_0.2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.0-283.1.9d4029a.git.el9_2.1", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 7", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://access.redhat.com/errata/RHSA-2024:3657", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3657" }, { "url": "https://access.redhat.com/errata/RHSA-2024:3658", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3658" }, { "url": "https://access.redhat.com/errata/RHSA-2024:3659", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3659" }, { "url": "https://access.redhat.com/errata/RHSA-2024:3660", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3660" }, { "url": "https://access.redhat.com/errata/RHSA-2024:3661", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3661" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4400", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4400" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4411", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4411" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-3049", "refsource": "MISC", "name": "https://access.redhat.com/security/cve/CVE-2024-3049" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272082", "refsource": "MISC", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2272082" } ] }, "work_around": [ { "lang": "en", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability." } ], "impact": { "cvss": [ { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" } ] } }