Red Hat Security AdvisoryRHSA-2014:0253
Red Hat JBoss Enterprise Application Platform 6.2.1 security update
Released 2014-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5 Server jbossweb-7.3.0-2.Final_redhat_2.1.ep6.el5
- Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6 Server jbossweb-7.3.0-2.Final_redhat_2.1.ep6.el6
Fixes 1 record
Priority HIGH 80
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a craf…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.83334 · Published 2014-03-28 · Partial fix · 1.3.1, 8.0.3 +1 CWE-835
