Skip to content
OpenAdvisories
Medium RHSA-2016:2640 1 CVE

Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.3 on RHEL 6

Published Sep 15, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate 0:5.0.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-core 0:5.0.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-entitymanager 0:5.0.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-envers 0:5.0.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-infinispan 0:5.0.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-java8 0:5.0.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-remoting 0:4.0.21-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-xnio-base 0:3.4.0-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-undertow 0:1.3.25-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly 0:7.0.3-4.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-javadocs 0:7.0.3-2.GA_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-modules 0:7.0.3-4.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-xerces-j2 0:2.11.0-24.SP5_redhat_1.1.ep7.el6

Vulnerabilities 1

  • Medium 5.9
    CVE-2016-7046

    Undertow Uncaught Exception vulnerability

    Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/703-release-notes/
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?version=7.0/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1376646
  • article
    https://issues.redhat.com/browse/JBEAP-5590
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2640.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-7046
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-7046
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-7046