Red Hat Security AdvisoryRHSA-2024:4392
Red Hat JBoss Enterprise Application Platform 8.0.2 Security update
Released 2024-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 8
Fixes 4 records
Priority HIGH 81
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.88755 · Published 2024-04-04 · Partial fix CWE-770
Priority MEDIUM 62
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00871 · Published 2023-12-25 · Partial fix · 0.9.4 CWE-400
Priority MEDIUM 44
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02921 · Published 2024-07-08 · Partial fix · 2.2.34.Final, 2.3.15.Final +4 CWE-674
Priority LOW 34
A vulnerability was found in Undertow.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01866 · Published 2024-07-08 · Partial fix · 5.2.4.redhat-00001, 2.2.33.SP1-redhat-00001 +5 CWE-401
THREATIST.IORead the docs