Red Hat Security AdvisoryRHSA-2016:2640
JBoss Enterprise Application Platform 7.0.3 on RHEL 6
Released 2016-11-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 Server eap7-hibernate-5.0.11-1.Final_redhat_1.1.ep7.el6, eap7-hibernate-core-5.0.11-1.Final_redhat_1.1.ep7.el6, eap7-hibernate-entitymanager-5.0.11-1.Final_redhat_1.1.ep7.el6 +10
Fixes 1 record
Priority LOW 31
Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0248 · Published 2016-10-03 · Fixed in 1.4.3.Final, 1.3.25.Final CWE-399
