Red Hat Security Advisory

RHSA-2019:1711

Red Hat JBoss Web Server 3.1 Service Pack 7 security and bug fix update

Released 2019-07-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 3.1 for RHEL 6 tomcat-native-1.2.17-19.redhat_19.ep7.el6, tomcat7-7.0.70-34.ep7.el6, tomcat7-admin-webapps-7.0.70-34.ep7.el6 +22
Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat-native-1.2.17-19.redhat_19.ep7.el7, tomcat7-7.0.70-34.ep7.el7, tomcat7-admin-webapps-7.0.70-34.ep7.el7 +22

Fixes 1 record

TI-2018-00685 CVE-2018-0739 · GHSA-2qcx-c97v-hcr6

Constructed ASN.1 types with a recursive definition could exceed the stack

MEDIUM 47

Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.18596 Published 2018-03-27 Partial fix CWE-674