Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.1

Fixed packages 4

Vulnerabilities 8

• Critical 9.8
  CVE-2017-15095

  jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution

  A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This i…

  FasterXML jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  Feb 6, 2018
• Critical 9.8
  CVE-2017-17485 Public exploit EPSS 50%

  jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass

  FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readVa…

  jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  Jan 10, 2018
• High 8.8
  CVE-2017-15089

  Deserialization of Untrusted Data in Infinispan

  It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and…

  Infinispan infinispan org.infinispan:infinispan-core Maven
  Feb 15, 2018
• High 8.1
  CVE-2018-5968

  Deserialization of Untrusted Data in jackson-databind

  FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypa…

  com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  Jan 22, 2018
• High 7.5
  CVE-2017-12174

  Uncontrolled Resource Consumption in Artemis and HornetQ

  It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryEr…

  Red Hat HornetQ/Artemis org.apache.activemq:artemis-native org.hornetq:hornetq-server Maven
  Mar 7, 2018
• High 7.5
  CVE-2017-7561

  Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP

  Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.

  Red Hat RESTEasy resteasy3.0 resteasy3.0 Debian Ubuntu Maven
  Sep 13, 2017
• High 7.5
  CVE-2018-1048

  Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow

  It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the informati…

  Red Hat undertow as shipped in Jboss EAP 7.1.0.GA undertow undertow Debian Ubuntu Maven
  Jan 24, 2018
• Medium 4.8
  CVE-2017-12196

  Incorrect Authorization in Undertow

  undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker t…

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Apr 18, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1483823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1498378
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503055
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1506612
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1528565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534343
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1538332
• article
  https://issues.redhat.com/browse/JBEAP-7533
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0481.json
• report
  https://access.redhat.com/security/cve/CVE-2017-7561
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-7561
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-7561
• report
  https://access.redhat.com/security/cve/CVE-2017-12174
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12174
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12174
• report
  https://access.redhat.com/security/cve/CVE-2017-12196
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12196
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12196
• report
  https://access.redhat.com/security/cve/CVE-2017-15089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15089
• report
  https://access.redhat.com/security/cve/CVE-2017-15095
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15095
• article
  https://access.redhat.com/solutions/3442891
• report
  https://access.redhat.com/security/cve/CVE-2017-17485
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-17485
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-17485
• report
  https://access.redhat.com/security/cve/CVE-2018-1048
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1048
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1048
• report
  https://access.redhat.com/security/cve/CVE-2018-5968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5968
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5968