Skip to content
OpenAdvisories
Medium RHSA-2016:2642 1 CVE

Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.0.3

Published Sep 15, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-ec2-eap 0:7.0.3-3.GA_redhat_2.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-ec2-eap-samples 0:7.0.3-3.GA_redhat_2.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-ec2-eap 0:7.0.3-3.GA_redhat_2.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-ec2-eap-samples 0:7.0.3-3.GA_redhat_2.ep7.el7

Vulnerabilities 1

  • Medium 5.9
    CVE-2016-7046

    Undertow Uncaught Exception vulnerability

    Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/703-release-notes/
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1376646
  • article
    https://issues.redhat.com/browse/JBEAP-5593
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2642.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-7046
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-7046
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-7046