debian/booth vulnerabilities

Latest debian/booth CVEs

Newest publication first

1. DSA-5777-1 booth - security update

   Published 2024-09-27

   Unknown

2. DLA-3894-1 booth - security update

   Published 2024-09-24

   Unknown

3. CVE-2024-3049 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

   Published 2024-06-06

   Medium·CVSS 5.9 EPSS 0.53%

   A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.

4. DSA-5194-1 booth - security update

   Published 2022-07-29

   Unknown

5. CVE-2022-2553 The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are...

   Published 2022-07-28

   Medium·CVSS 6.5 EPSS 1.3%

   The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.