DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2022-10-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform und Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-25857US | high7.5 | — | ||
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections. | ||||
| CVE-2022-2053US | high7.5 | — | ||
When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection without… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-6820 vom 2022-10-07external
- Red Hat Security Advisory vom 2022-10-05external
- Red Hat Security Advisory vom 2022-10-05external
- Red Hat Security Advisory vom 2022-10-05external
- Red Hat Security Advisory vom 2022-10-05external
- Red Hat Security Advisory RHSA-2022:6835 vom 2022-10-06external
- Red Hat Security Advisory RHSA-2022:6941 vom 2022-10-13external
- Red Hat Security Advisory RHSA-2022:8652 vom 2022-11-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan