Red Hat Security AdvisoryRHSA-2016:0598
jboss-ec2-eap security, bug fix, and enhancement update
Released 2016-04-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jboss-ec2-eap-7.5.7-2.Final_redhat_3.ep6.el6, jboss-ec2-eap-samples-7.5.7-2.Final_redhat_3.ep6.el6
Fixes 2 records
Priority MEDIUM 59
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.20183 · Published 2015-06-07 · Partial fix · 6.0.44, 7.0.55 +1 CWE-399
Priority LOW 38
The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02646 · Published 2016-05-06 · Fixed CWE-399
