Red Hat Security Advisory

RHSA-2017:0517

Red Hat JBoss Enterprise Application Platform security update

Released 2017-03-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4

Fixes 2 records

TI-2017-03966 CVE-2017-6056 · GHSA-vf6r-cgfg-q96j

It was discovered that a programming error in the processing of HTTPS requests in the…

MEDIUM 43

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07579 Published 2017-02-17 Partial fix CWE-835

TI-2016-05434 CVE-2016-6346 · GHSA-wxvr-vqfp-9cqw

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

MEDIUM 41

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05601 Published 2016-09-07 Partial fix · 3.0.20.Final