Red Hat Security AdvisoryRHSA-2017:0179
Red Hat JBoss Fuse/A-MQ 6.3 security and bug fix update
Released 2017-01-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss A-MQ 6.3
- Red Hat JBoss Fuse 6.3
Fixes 2 records
Priority MEDIUM 46
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.11259 · Published 2017-04-13 · Partial fix · 4.0.37.Final, 4.1.1.Final CWE-835
Priority MEDIUM 41
Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0384 · Published 2016-06-01 · Partial fix · 1.8.12, 2.0.1 CWE-611
