Red Hat Security Advisory: Red Hat JBoss Web Server 5.2 security release

Fixed packages 60

Vulnerabilities 6

• High 8.1
  CVE-2019-0232 Public exploit Scanner template EPSS 100%

  Apache Tomcat OS Command Injection vulnerability

  When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windo…

  Apache Tomcat org.apache.tomcat.embed:tomcat-embed-core Maven
  Apr 15, 2019
• High 7.5
  CVE-2019-0199 EPSS 73%

  Apache Tomcat Denial of Service vulnerability

  The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open…

  tomcat9 tomcat8 org.apache.tomcat.embed:tomcat-embed-core org.apache.tomcat:tomcat-coyote Debian Ubuntu Maven
  Apr 10, 2019
• High 7.5
  CVE-2019-10072 EPSS 73%

  Improper Locking in Apache Tomcat

  The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not sending WINDOW_UPDATE messages for the connection window (stream 0) clients wer…

  tomcat8 tomcat9 tomcat9 org.apache.tomcat.embed:tomcat-embed-core Debian Ubuntu Maven
  Jun 21, 2019
• Medium 6.1
  CVE-2019-0221 Public exploit Scanner template EPSS 58%

  Cross-site scripting in Apache Tomcat

  The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and…

  Apache Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  May 28, 2019
• Unscored —
  CVE-2018-5407 Public exploit

  Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

  openssl openssl openssl openssl1.0 Debian Ubuntu Alpine
  Nov 15, 2018
• Unscored —
  CVE-2019-1559 EPSS 17%

  0-byte record padding oracle

  If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding …

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  Feb 27, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.2/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1683804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1693325
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1713275
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1723708
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3929.json
• report
  https://access.redhat.com/security/cve/CVE-2018-5407
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5407
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5407
• article
  https://github.com/bbbrumley/portsmash
• article
  https://www.openssl.org/news/secadv/20181112.txt
• report
  https://access.redhat.com/security/cve/CVE-2019-0199
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0199
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0199
• report
  https://access.redhat.com/security/cve/CVE-2019-0221
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0221
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0221
• report
  https://access.redhat.com/security/cve/CVE-2019-0232
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1701056
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0232
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0232
• report
  https://access.redhat.com/security/cve/CVE-2019-1559
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-1559
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-1559
• article
  https://github.com/RUB-NDS/TLS-Padding-Oracles
• article
  https://www.openssl.org/news/secadv/20190226.txt
• report
  https://access.redhat.com/security/cve/CVE-2019-10072
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10072
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10072
• article
  http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.41
• article
  http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.20