Skip to content
OpenAdvisories
Unscored RHEA-2015:1771 3 CVEs

Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.1 enhancement update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 31

ReleasePackageFixed in
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_bmx 0:0.9.5-5.GA.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_bmx-debuginfo 0:0.9.5-5.GA.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_cluster 0:1.3.1-8.Final_redhat_3.1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_cluster-tomcat7 0:1.3.1-8.Final_redhat_3.1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_cluster-tomcat8 0:1.3.1-8.Final_redhat_3.1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_jk 0:1.2.40-8.redhat_1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_jk-ap24 0:1.2.40-8.redhat_1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_jk-debuginfo 0:1.2.40-8.redhat_1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_jk-manual 0:1.2.40-8.redhat_1.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_security-jws3 0:2.8.0-6.GA.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 mod_security-jws3-debuginfo 0:2.8.0-6.GA.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-admin-webapps 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-docs-webapp 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-el-2.2-api 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-javadoc 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-jsp-2.2-api 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-lib 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-log4j 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-servlet-3.0-api 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat7-webapps 0:7.0.59-26_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-admin-webapps 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-docs-webapp 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-el-2.2-api 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-javadoc 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-jsp-2.3-api 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-lib 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-log4j 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-servlet-3.1-api 0:8.0.18-25_patch_00.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.0::el6 tomcat8-webapps 0:8.0.18-25_patch_00.ep7.el6

Vulnerabilities 3

  • High —
    CVE-2014-0230 EPSS 20%

    Uncontrolled Resource Consumption in Apache Tomcat

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread co…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  • Unscored —
    CVE-2014-8111

    Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which a…

    libapache-mod-jk Debian
  • Unscored —
    CVE-2015-0288

    The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.…

    openssl openssl Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219753
  • article
    https://issues.redhat.com/browse/JWS-110
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhea-2015_1771.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0230
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1191200
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0230
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0230
  • article
    http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44
  • article
    http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55
  • article
    http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9
  • report
    https://access.redhat.com/security/cve/CVE-2014-8111
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1182591
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8111
  • report
    https://access.redhat.com/security/cve/CVE-2015-0288
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0288
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0288
  • article
    https://access.redhat.com/articles/1384453
  • article
    https://openssl.org/news/secadv_20150319.txt