Red Hat Security AdvisoryRHSA-2024:7736
Red Hat JBoss Enterprise Application Platform 7.4 Security update
Released 2024-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-undertow-2.2.33-2.SP2_redhat_00001.1.el7eap, eap7-wildfly-7.4.18-1.GA_redhat_00003.1.el7eap, eap7-wildfly-java-jdk11-7.4.18-1.GA_redhat_00003.1.el7eap +3
- Red Hat JBoss EAP 7.4 for RHEL 8 eap7-undertow-2.2.33-2.SP2_redhat_00001.1.el8eap, eap7-wildfly-7.4.18-1.GA_redhat_00003.1.el8eap, eap7-wildfly-java-jdk11-7.4.18-1.GA_redhat_00003.1.el8eap +4
- Red Hat JBoss EAP 7.4 for RHEL 9 eap7-undertow-2.2.33-2.SP2_redhat_00001.1.el9eap, eap7-wildfly-7.4.18-1.GA_redhat_00003.1.el9eap, eap7-wildfly-java-jdk11-7.4.18-1.GA_redhat_00003.1.el9eap +4
Fixes 1 record
Priority LOW 38
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02644 · Published 2024-08-21 · Partial fix · 2.2.36.Final, 2.3.17.Final +27 CWE-362
