Skip to content
OpenAdvisories
High RHSA-2017:0834 2 CVEs

Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.0.5

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-ec2-eap 0:7.0.5-1.GA_redhat_1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-ec2-eap-samples 0:7.0.5-1.GA_redhat_1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-ec2-eap 0:7.0.5-1.GA_redhat_1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-ec2-eap-samples 0:7.0.5-1.GA_redhat_1.ep7.el7

Vulnerabilities 2

  • High 7.5
    CVE-2016-9589

    Red Hat Wildfly DoS

    Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill m…

    Red Hat wildfly org.wildfly:wildfly-undertow Maven
  • High 7.0
    CVE-2016-8656

    Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script…

    jboss jbossas

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/
  • article
    https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404782
  • article
    https://issues.redhat.com/browse/JBEAP-6997
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0834.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8656
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8656
  • report
    https://access.redhat.com/security/cve/CVE-2016-9589
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9589
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9589