Read the docs
Red Hat Security Advisory

RHSA-2017:3240

Red Hat JBoss Enterprise Application Platform 6.4.18 security update

Released 2017-11-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2017-07178 CVE-2017-9798 · GHSA-jxf6-fx3m-8x2r

Use after free in Apache HTTP Server

Priority HIGH 77

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.94651 Published 2017-09-18 Partial fix CWE-416
Priority HIGH 73

In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_d…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.5677 Published 2017-07-13 Partial fix CWE-20