MiracleLinux 8 : booth-1.1-1.el8_10.1 (AXSA:2024-8489:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8489:04 advisory. booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server CVE-2024-3049 Tenable has extracted the preceding description block...

CVE-2024-3049 affecting package booth for versions less than 1.2-1

CVE-2024-3049 affecting package booth for versions less than 1.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2553 affecting package booth for versions less than 1.0-8

CVE-2022-2553 affecting package booth for versions less than 1.0-8. A patched version of the package is available...

Debian: Security Advisory (DLA-3894-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3894 : booth - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3894 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3894-1 [email protected] https://www.debian.org/lts/security/...

SUSE SLES12 Security Update : booth (SUSE-SU-2024:2251-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2251-1 advisory. - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. bsc1226032 Tenable has...

openSUSE Security Advisory (SUSE-SU-2024:2063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : booth (SUSE-SU-2024:2062-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2062-1 advisory. - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. bsc1226032 Tenable has...

Fedora: Security Advisory (FEDORA-2024-17e71fc540)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : booth (RLSA-2024:3659)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3659 advisory. booth: specially crafted hash can lead to invalid HMAC being accepted by Booth server CVE-2024-3049 Tenable has extracted the preceding description block directl...

CentOS 9 : booth-1.0-251.4.bfb2f92.git.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the booth-1.0-251.4.bfb2f92.git.el9 build changelog. - The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a...

RHEL 9 : booth (RHSA-2022:6580)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6580 advisory. The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inpu...

Ubuntu: Security Advisory (USN-5556-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : booth (SUSE-SU-2022:2607-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:2607-1 advisory. - CVE-2022-2553: authfile directive in booth config file is completely ignored bsc1201946. Tenable has extracted the preceding description block direct...

SUSE SLES12 Security Update : booth (SUSE-SU-2022:2605-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:2605-1 advisory. - CVE-2022-2553: authfile directive in booth config file is completely ignored bsc1201946. Tenable has extracted the preceding description block direct...

AZL-25645 CVE-2022-2553 affecting package booth for versions less than 1.0-8

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...