Skip to content
OpenAdvisories
Critical RHSA-2017:1835 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.0.7 on RHEL 7

Published Sep 20, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 57

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-cli 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-commons 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-core-client 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-dto 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-hornetq-protocol 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-hqclient-protocol 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-jms-client 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-jms-server 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-journal 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-native 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-ra 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-selector 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-server 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-activemq-artemis-service-extensions 0:1.1.0-18.SP21_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-glassfish-jsf 0:2.2.12-2.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-hibernate 0:5.0.14-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-hibernate-core 0:5.0.14-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-hibernate-entitymanager 0:5.0.14-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-hibernate-envers 0:5.0.14-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-hibernate-infinispan 0:5.0.14-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-hibernate-java8 0:5.0.14-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-common-api 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-common-impl 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-common-spi 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-core-api 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-core-impl 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-deployers-common 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-jdbc 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-ironjacamar-validator 0:1.3.7-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jackson-databind 0:2.5.4-2.redhat_2.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-modules 0:1.5.4-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-remoting 0:4.0.23-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-jboss-xnio-base 0:3.4.6-1.Final_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-async-http-servlet-3.0 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-atom-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-cdi 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-client 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-crypto 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jackson-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jackson2-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jaxb-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jaxrs 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jettison-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jose-jwt 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-jsapi 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-json-p-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-multipart-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-spring 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-validator-provider-11 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-resteasy-yaml-provider 0:3.0.19-6.SP4_redhat_1.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-wildfly 0:7.0.7-4.GA_redhat_3.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-wildfly-javadocs 0:7.0.7-3.GA_redhat_4.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-wildfly-modules 0:7.0.7-4.GA_redhat_3.1.ep7.el7
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el7 eap7-wildfly-web-console-eap 0:2.8.30-1.Final_redhat_1.1.ep7.el7

Vulnerabilities 2

  • Critical 9.8
    CVE-2017-7525 Public exploit EPSS 38%

    jackson-databind is vulnerable to a deserialization flaw

    A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.

    FasterXML jackson-databind jackson-databind com.fasterxml.jackson.core:jackson-databind Debian Ubuntu Maven
  • High 7.2
    CVE-2016-4978

    Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain

    The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Art…

    org.apache.activemq:artemis-pom Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/installation-guide/
  • article
    https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1379207
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1462702
  • article
    https://issues.redhat.com/browse/JBEAP-9465
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1835.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4978
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4978
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4978
  • report
    https://access.redhat.com/security/cve/CVE-2017-7525
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7525
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7525