Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 1 security update

Fixed packages 54

Vulnerabilities 9

• Critical 9.8
  CVE-2017-5645 Public exploit Scanner template EPSS 89%

  Deserialization of Untrusted Data in Log4j

  In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

  Apache Software Foundation Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Apr 17, 2017
• Critical 9.8
  CVE-2019-17571 Public exploit EPSS 70%

  Deserialization of Untrusted Data in Log4j

  Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log dat…

  Apache Software Foundation Log4j druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  Dec 20, 2019
• Critical 9.1
  CVE-2017-5648 EPSS 13%

  Exposure of Resource to Wrong Sphere in Apache Tomcat

  While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted appli…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Apr 17, 2017
• High 7.5
  CVE-2017-5647 EPSS 17%

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

  A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing …

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven
  Apr 17, 2017
• High 7.5
  CVE-2017-5664 EPSS 17%

  Improper Handling of Exceptional Conditions in Apache Tomcat

  The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is prese…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven
  Jun 6, 2017
• Medium 5.5
  CVE-2016-7056

  A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to reco…

  The OpenSSL Project openssl openssl openssl Debian Ubuntu
  Sep 10, 2018
• Medium 4.3
  CVE-2017-7674

  Insufficient Verification of Data Authenticity in Apache Tomcat

  The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Ubuntu Maven
  Aug 11, 2017
• Unscored —
  CVE-2016-6304 EPSS 63%

  Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote a…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 26, 2016
• Unscored —
  CVE-2016-8610 Public exploit EPSS 40%

  A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL prot…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu
  Nov 13, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1441205
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1441223
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443635
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1459158
• article
  https://issues.redhat.com/browse/JWS-657
• article
  https://issues.redhat.com/browse/JWS-667
• article
  https://issues.redhat.com/browse/JWS-695
• article
  https://issues.redhat.com/browse/JWS-709
• article
  https://issues.redhat.com/browse/JWS-716
• article
  https://issues.redhat.com/browse/JWS-717
• article
  https://issues.redhat.com/browse/JWS-725
• article
  https://issues.redhat.com/browse/JWS-741
• article
  https://issues.redhat.com/browse/JWS-760
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1801.json
• report
  https://access.redhat.com/security/cve/CVE-2016-6304
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1377600
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-6304
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-6304
• article
  https://www.openssl.org/news/secadv/20160922.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-7056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1412120
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7056
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7056
• report
  https://access.redhat.com/security/cve/CVE-2016-8610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1384743
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-8610
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-8610
• article
  http://security.360.cn/cve/CVE-2016-8610
• report
  https://access.redhat.com/security/cve/CVE-2017-5645
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5645
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5645
• report
  https://access.redhat.com/security/cve/CVE-2017-5647
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5647
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5647
• report
  https://access.redhat.com/security/cve/CVE-2017-5648
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5648
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5648
• report
  https://access.redhat.com/security/cve/CVE-2017-5664