Skip to content
OpenAdvisories
Critical RHSA-2016:1330 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4 security update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el5 jgroups 1:3.2.16-1.Final_redhat_1.1.ep6.el5
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jgroups 1:3.2.16-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jgroups 1:3.2.16-1.Final_redhat_1.1.ep6.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2016-2141

    Improper Input Validation in JGroups

    It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the …

    org.jgroups:jgroups libjgroups-java libjgroups-java Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?version=6.4
  • article
    https://access.redhat.com/articles/2360521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1313589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343600
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1330.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-2141
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2141
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2141