Skip to content
OpenAdvisories
Unscored RHSA-2016:0596 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.7 update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 86

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 glassfish-jsf-eap6 0:2.1.28-10.SP9_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hornetq 0:2.3.25-11.SP9_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan 0:5.2.18-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-cachestore-jdbc 0:5.2.18-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-cachestore-remote 0:5.2.18-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-client-hotrod 0:5.2.18-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 infinispan-core 0:5.2.18-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-api-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-impl-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-spi-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-core-api-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-core-impl-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-deployers-common-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-jdbc-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-spec-api-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-validator-eap6 0:1.0.36-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-appclient 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cli 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-client-all 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-clustering 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cmp 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-configadmin 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-connector 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-console 0:2.5.12-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller-client 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-core-security 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-repository 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-scanner 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-http 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-management 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee-deployment 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ejb3 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-embedded 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-host-controller 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jacorb 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxr 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxrs 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jdr 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jmx 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jpa 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsf 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsr77 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-logging 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-mail 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-management-client-content 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-messaging 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-modcluster 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-naming 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-network 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-configadmin 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-service 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-picketlink 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-platform-mbean 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-pojo 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-process-controller 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-protocol 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-remoting 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-sar 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-security 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-server 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-system-jmx 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-threads 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-transactions 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-version 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-web 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-webservices 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-weld 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-xts 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-hal 0:2.5.12-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-security-negotiation 0:2.3.11-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-appclient 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-bundles 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-core 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-domain 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-javadocs 0:7.5.7-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-modules-eap 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-product-eap 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-standalone 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-welcome-content-eap 0:7.5.7-2.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossweb 0:7.5.15-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 resteasy 0:2.3.13-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 weld-core 0:1.1.33-1.Final_redhat_1.1.ep6.el6

Vulnerabilities 2

  • High —
    CVE-2014-0230 EPSS 20%

    Uncontrolled Resource Consumption in Apache Tomcat

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread co…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  • Unscored —
    CVE-2016-2094

    The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket a…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1191200
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1291759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1295462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299559
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299903
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1302404
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1304474
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1308465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1310700
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311623
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312041
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0596.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0230
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0230
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0230
  • article
    http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.44
  • article
    http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55
  • article
    http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.9
  • report
    https://access.redhat.com/security/cve/CVE-2016-2094
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2094