DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2021-11-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Vertraulichkeit und Integrität zu gefährden.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3717US | high7.8 | — | ||
A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine.… | ||||
| CVE-2021-3629US | medium5.9 | — | ||
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. Th… | ||||
| CVE-2021-37714US | high7.5 | — | ||
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on u… | ||||
| CVE-2021-30129US | medium6.5 | — | ||
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:4676 vom 2021-11-15external
- Red Hat Security Advisory RHSA-2021:4677 vom 2021-11-15external
- Red Hat Security Advisory RHSA-2021:4679 vom 2021-11-15external
- Red Hat Security Advisory RHSA-2021:4767 vom 2021-11-23external
- Red Hat Security Advisory RHSA-2021:5149 vom 2021-12-15external
- Red Hat Security Advisory RHSA-2021:5150 vom 2021-12-15external
- Red Hat Security Advisory RHSA-2021:5151 vom 2021-12-15external
- Red Hat Security Advisory RHSA-2021:5154 vom 2021-12-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan