Skip to content
OpenAdvisories
High RHSA-2016:2055 3 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 6

Published Sep 15, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hornetq-native 0:2.3.25-4.SP11_redhat_1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hornetq-native-debuginfo 0:2.3.25-4.SP11_redhat_1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpd 0:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpd-debuginfo 0:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpd-devel 0:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpd-manual 0:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpd-tools 0:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24 0:1-3.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-openssl 1:1.0.2h-4.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-openssl-debuginfo 1:1.0.2h-4.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-openssl-devel 1:1.0.2h-4.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-openssl-libs 1:1.0.2h-4.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-openssl-perl 1:1.0.2h-4.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-openssl-static 1:1.0.2h-4.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbcs-httpd24-runtime 0:1-3.jbcs.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-hornetq-native 0:2.3.25-4.SP11_redhat_1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-jbossweb-native 0:1.1.34-5.redhat_1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_cluster-native 0:1.2.13-3.Final_redhat_2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_cluster-native-debuginfo 0:1.2.13-3.Final_redhat_2.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_jk 0:1.2.41-2.redhat_4.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_jk-ap22 0:1.2.41-2.redhat_4.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_jk-debuginfo 0:1.2.41-2.redhat_4.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_ldap 0:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 mod_ssl 1:2.2.26-54.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 tomcat-native 0:1.1.34-5.redhat_1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 tomcat-native-debuginfo 0:1.1.34-5.redhat_1.ep6.el6

Vulnerabilities 3

  • High 7.5
    CVE-2016-3110

    mod_cluster Denial of Service vulnerability

    mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.

    org.jboss.mod_cluster:mod_cluster-parent Maven
  • Unscored —
    CVE-2015-3183 EPSS 74%

    The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk header…

    apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2016-4459

    Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/articles/2688611
  • article
    https://access.redhat.com/solutions/222023
  • article
    https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
  • article
    https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1326320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1341583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1345995
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2055.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3183
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3183
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3183
  • report
    https://access.redhat.com/security/cve/CVE-2016-3110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3110
  • report
    https://access.redhat.com/security/cve/CVE-2016-4459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4459