Red Hat Security AdvisoryRHSA-2016:0595
Red Hat JBoss Enterprise Application Platform 6.4.7 update
Released 2016-04-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server glassfish-jsf-eap6-2.1.28-10.SP9_redhat_1.1.ep6.el5, hornetq-2.3.25-11.SP9_redhat_1.1.ep6.el5, infinispan-5.2.18-1.Final_redhat_1.1.ep6.el5 +47
Fixes 2 records
Priority MEDIUM 59
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.20183 · Published 2015-06-07 · Partial fix · 6.0.44, 7.0.55 +1 CWE-399
Priority LOW 38
The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02646 · Published 2016-05-06 · Fixed CWE-399
