Threats affecting pkg:github/clusterlabs/booth

CVE-2024-3049 is a vulnerability in Booth, a cluster ticket manager used in high availability clusters. The flaw allows a specially crafted hash to be passed to the function gcry_md_get_algo_dlen(), potentially causing the Booth server to accept an invalid HMAC. This could undermine the integrity verification of authorization tickets used to control resource allocation in clustered environments. The issue affects Booth version 1.0-283.1 and has a CVSS score of 5.9, indicating a medium severity impact primarily on integrity.