Skip to content
OpenAdvisories
Unscored RHSA-2019:1711 1 CVE

Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 7 security and bug fix update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 52

ReleasePackageFixed in
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat-native 0:1.2.17-19.redhat_19.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat-native-debuginfo 0:1.2.17-19.redhat_19.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-admin-webapps 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-docs-webapp 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-el-2.2-api 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-javadoc 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-jsp-2.2-api 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-jsvc 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-lib 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-log4j 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-selinux 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-servlet-3.0-api 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat7-webapps 0:7.0.70-34.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-admin-webapps 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-docs-webapp 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-el-2.2-api 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-javadoc 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-jsp-2.3-api 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-jsvc 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-lib 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-log4j 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-selinux 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-servlet-3.1-api 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el6 tomcat8-webapps 0:8.0.36-39.ep7.el6
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat-native 0:1.2.17-19.redhat_19.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat-native-debuginfo 0:1.2.17-19.redhat_19.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-admin-webapps 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-docs-webapp 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-el-2.2-api 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-javadoc 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-jsp-2.2-api 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-jsvc 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-lib 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-log4j 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-selinux 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-servlet-3.0-api 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat7-webapps 0:7.0.70-34.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-admin-webapps 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-docs-webapp 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-el-2.2-api 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-javadoc 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-jsp-2.3-api 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-jsvc 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-lib 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-log4j 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-selinux 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-servlet-3.1-api 0:8.0.36-39.ep7.el7
Red Hat · JBoss Web Server 3 jboss_enterprise_web_server:3.1::el7 tomcat8-webapps 0:8.0.36-39.ep7.el7

Vulnerabilities 1

  • Unscored —
    CVE-2018-0739 EPSS 19%

    Constructed ASN.1 types with a recursive definition could exceed the stack

    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/3.1/html/3.1.0_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1561266
  • article
    https://issues.redhat.com/browse/JWS-1303
  • article
    https://issues.redhat.com/browse/JWS-1414
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1711.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-0739
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0739
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0739
  • article
    https://www.openssl.org/news/secadv/20180327.txt