Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update

Fixed packages 49

Vulnerabilities 10

• Unscored —
  CVE-2016-2182 EPSS 44%

  The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, whi…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-4975 Scanner template EPSS 20%

  mod_userdir CRLF injection

  Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed …

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu
  Aug 14, 2018
• Unscored —
  CVE-2016-6302 EPSS 28%

  The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validati…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-6306 EPSS 42%

  The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial …

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 26, 2016
• Unscored —
  CVE-2016-7055 EPSS 14%

  There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1…

  openssl openssl openssl Debian Ubuntu Alpine
  May 4, 2017
• Unscored —
  CVE-2017-3731 EPSS 57%

  Truncated packet could crash via OOB read

  If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be trigge…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  May 4, 2017
• Unscored —
  CVE-2017-3732 EPSS 15%

  BN_mod_exp may produce incorrect results on x86_64

  There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very dif…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  May 4, 2017
• Unscored —
  CVE-2017-3736 EPSS 10%

  There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before …

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine
  Nov 2, 2017
• Unscored —
  CVE-2017-3737 EPSS 79%

  OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal erro…

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  Dec 7, 2017
• Unscored —
  CVE-2017-3738 EPSS 13%

  There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. N…

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  Dec 7, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1367340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1369855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1377594
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1393929
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416852
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1416856
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1509169
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1523504
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1523510
• article
  https://issues.redhat.com/browse/JBCS-373
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2185.json
• report
  https://access.redhat.com/security/cve/CVE-2016-2182
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-2182
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-2182
• article
  https://www.openssl.org/news/secadv/20160922.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-4975
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-4975
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-4975
• article
  https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975
• report
  https://access.redhat.com/security/cve/CVE-2016-6302
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-6302
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-6302
• report
  https://access.redhat.com/security/cve/CVE-2016-6306
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-6306
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-6306
• report
  https://access.redhat.com/security/cve/CVE-2016-7055
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7055
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7055
• article
  https://www.openssl.org/news/secadv/20161110.txt
• article
  https://www.openssl.org/news/secadv/20170126.txt
• report
  https://access.redhat.com/security/cve/CVE-2017-3731
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-3731
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-3731
• report
  https://access.redhat.com/security/cve/CVE-2017-3732
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-3732