Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-9589US | high7.5 | — | ||
Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in pers… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/external
- https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/external
- https://access.redhat.com/errata/RHSA-2017:0830self
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=7.0external
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1404782external
- Canonical URLself
remediations (1)
- FixedRed Hat JBoss Enterprise Application Platform 7
Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2017:0830
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan