Red Hat Security AdvisoryRHSA-2016:2642
jboss-ec2-eap package for EAP 7.0.3
Released 2016-11-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 Server eap7-jboss-ec2-eap-7.0.3-3.GA_redhat_2.ep7.el6, eap7-jboss-ec2-eap-samples-7.0.3-3.GA_redhat_2.ep7.el6
- Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7 Server eap7-jboss-ec2-eap-7.0.3-3.GA_redhat_2.ep7.el7, eap7-jboss-ec2-eap-samples-7.0.3-3.GA_redhat_2.ep7.el7
Fixes 1 record
Priority LOW 31
Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0248 · Published 2016-10-03 · Fixed in 1.4.3.Final, 1.3.25.Final CWE-399
