5.9

CVE-2024-3049: clusterlabs booth

CVSS: 5.9v3.1MediumModified
AliasesSUSE-SU-2024:2040-1SUSE-SU-2024:2041-1SUSE-SU-2024:2042-1
Published 06-06-2024Last modified 17-03-2026
Open JSON

Vulnerability summary

CVE-2024-3049 is a medium (CVSS 5.9) vulnerability in clusterlabs booth. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.6% of scored vulnerabilities.

Overall risk
24/100
0100
Low · default modelHow is this calculated?
CVSS score
5.9/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.53%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 06-06-2024
    PublishedVulnerability first disclosed.
  2. 17-03-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.53%

Chance of exploitation in the next 30 days

Percentile

44%

Versus all other CVEs

30-day change

0.00 pp

From 0.53% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.53%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat14 products
Suse6 products
  • booth&distro=SUSE Linux Enterprise High Availability Extension 15 SP2< 1.0-150100.11.6.1
  • booth&distro=SUSE Linux Enterprise High Availability Extension 15 SP3< 1.0-150300.18.6.1
  • booth&distro=SUSE Linux Enterprise High Availability Extension 15 SP4< 1.0+20210519.bfb2f92-150400.3.6.1
  • booth&distro=SUSE Linux Enterprise High Availability Extension 15 SP5< 1.0+20220815.f40c2d5-150500.3.3.1
  • booth&distro=SUSE Linux Enterprise High Availability Extension 15 SP6< 1.1+git0.09b0074-150600.3.3.1
Opensuse3 products
  • booth&distro=openSUSE Leap 15.5< 1.0+20220815.f40c2d5-150500.3.3.1
  • booth&distro=openSUSE Leap 15.6< 1.1+git0.09b0074-150600.3.3.1
  • booth&distro=openSUSE Tumbleweed< 1.2+git0.322fea0-1.1
Clusterlabs1 product
Debian1 product
  • booth< 1.1-2 | < 1.0-283-g9d4029a-2+deb12u1 | < 1.0-237-gdd88847-2+deb11u2
Ubuntu1 product
  • booth< 1.0-6ubuntu1+esm1 | < 1.0-174-gce9f821-1ubuntu0.2+esm1 | < 1.0-237-gdd88847-4ubuntu2.2+esm1 | < 1.1-1ubuntu4+esm1 | All versions (No fix recorded)

6 vendors · 26 products

References

34 links
Show all 34 references