Skip to content
OpenAdvisories
High RHSA-2016:2054 3 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 7

Published Sep 15, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hornetq-native 0:2.3.25-4.SP11_redhat_1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hornetq-native-debuginfo 0:2.3.25-4.SP11_redhat_1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpd22 0:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpd22-debuginfo 0:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpd22-devel 0:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpd22-manual 0:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 httpd22-tools 0:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24 0:1-3.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-openssl 1:1.0.2h-4.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-openssl-debuginfo 1:1.0.2h-4.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-openssl-devel 1:1.0.2h-4.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-openssl-libs 1:1.0.2h-4.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-openssl-perl 1:1.0.2h-4.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-openssl-static 1:1.0.2h-4.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbcs-httpd24-runtime 0:1-3.jbcs.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-hornetq-native 0:2.3.25-4.SP11_redhat_1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-jbossweb-native 0:1.1.34-5.redhat_1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_cluster-native 0:1.2.13-3.Final_redhat_2.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_cluster-native-debuginfo 0:1.2.13-3.Final_redhat_2.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_jk 0:1.2.41-2.redhat_4.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_jk-ap22 0:1.2.41-2.redhat_4.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_jk-debuginfo 0:1.2.41-2.redhat_4.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_ldap22 0:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 mod_ssl22 1:2.2.26-56.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 tomcat-native 0:1.1.34-5.redhat_1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 tomcat-native-debuginfo 0:1.1.34-5.redhat_1.ep6.el7

Vulnerabilities 3

  • High 7.5
    CVE-2016-3110

    mod_cluster Denial of Service vulnerability

    mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.

    org.jboss.mod_cluster:mod_cluster-parent Maven
  • Unscored —
    CVE-2015-3183 EPSS 74%

    The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk header…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2016-4459

    Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/articles/2688611
  • article
    https://access.redhat.com/solutions/222023
  • article
    https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
  • article
    https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1326320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1341583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345989
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345993
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345997
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2054.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3183
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3183
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3183
  • report
    https://access.redhat.com/security/cve/CVE-2016-3110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3110
  • report
    https://access.redhat.com/security/cve/CVE-2016-4459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4459