Red Hat Security Advisory

RHSA-2019:4040

Red Hat Single Sign-On 7.3.5 security update on RHEL 6

Released 2019-12-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.3 for RHEL 6 Server rh-sso7-keycloak-4.8.15-1.Final_redhat_00001.1.el6sso, rh-sso7-keycloak-server-4.8.15-1.Final_redhat_00001.1.el6sso

TI-2019-06950 CVE-2019-9515 · GHSA-9259-5376-vjcj

HIGH 75

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.87286 Published 2019-08-13 Partial fix CWE-400

TI-2019-06949 CVE-2019-9514 · GHSA-39qc-96h7-956f

HIGH 74

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.82813 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-06947 CVE-2019-9512 · GHSA-hgr8-6h9x-f7q9

HIGH 74

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83433 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-11042 CVE-2019-14837 · GHSA-cf8f-w2c5-p5jr

MEDIUM 43

A flaw was found in keycloack before version 8.0.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01718 Published 2020-01-07 Fixed in 8.0.0 CWE-547

TI-2019-11048 CVE-2019-14843 · GHSA-767r-575r-6x2j

MEDIUM 40

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0119 Published 2020-01-07 Fixed CWE-592

TI-2019-11043 CVE-2019-14838 · GHSA-82v2-f875-73g9

LOW 25

A flaw was found in wildfly-core before 7.2.5.GA.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01141 Published 2019-10-14 Partial fix · 7.2.5.GA CWE-284