DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
view advisory published 2017-03-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code mit Root Rechten zur Ausführung zu bringen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8657US | high7.8 | — | ||
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable t… | ||||
| CVE-2017-6056US | high7.5 | — | ||
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The… | ||||
| CVE-2016-6346US | high7.5 | — | ||
RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2017:0826 vom 2017-03-22external
- Red Hat Security Advisory RHSA-2017:0827 vom 2017-03-22external
- Red Hat Security Advisory RHSA-2017:0828 vom 2017-03-22external
- RedHat Security Advisoriy RHSA-2017:1675external
- RedHat Security Advisory: RHSA-2017:1676external
- Red Hat Security Advisory RHSA-2018:0002 vom 2018-01-03external
- Red Hat Security Advisory RHSA-2018:0003 vom 2018-01-03external
- Red Hat Security Advisory RHSA-2018:0004 vom 2018-01-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan