Red Hat Security AdvisoryRHSA-2016:2055
Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 6
Released 2016-10-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server hornetq-native-2.3.25-4.SP11_redhat_1.ep6.el6, hornetq-native-2.3.25-4.SP11_redhat_1.ep6.el6.i386, httpd-2.2.26-54.ep6.el6 +29
Fixes 3 records
Priority MEDIUM 61
The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, rel…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.74387 · Published 2015-07-20 · Partial fix CWE-17
Priority LOW 39
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate el…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0364 · Published 2016-09-26 · Partial fix · 1.3.3.Final CWE-20
Priority LOW 38
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02669 · Published 2017-04-12 · Partial fix CWE-119
