Skip to content
OpenAdvisories
Unscored RHSA-2011:1309 1 CVE

Red Hat Security Advisory: jbossas security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas 0:4.2.0-6.GA_CP09.11.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas-4.2.0.GA_CP09-bin 0:4.2.0-6.GA_CP09.11.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas-client 0:4.2.0-6.GA_CP09.11.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas 0:4.2.0-6.GA_CP09.11.1.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas-4.2.0.GA_CP09-bin 0:4.2.0-6.GA_CP09.11.1.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas-client 0:4.2.0-6.GA_CP09.11.1.ep1.el5

Vulnerabilities 1

  • Low —
    CVE-2011-1483

    JBossWS vulnerable to uncontrolled recursion

    wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Plat…

    org.jboss.ws:jbossws-common Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692584
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1309.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1483
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1483
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1483