Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update

Fixed packages 105

Vulnerabilities 8

• Critical 9.1
  CVE-2019-20444

  HTTP Request Smuggling in Netty

  HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

  druid netty netty io.netty:netty-codec-http Debian Ubuntu Wolfi Maven
  Jan 29, 2020
• High 7.5
  CVE-2019-0205 Public exploit

  Loop with Unreachable Exit Condition in Apache Thrift

  In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…

  Apache Apache Thrift druid trino Debian Azure Linux Wolfi Maven
  Oct 28, 2019
• High 7.5
  CVE-2019-0210

  Out-of-bounds read in Apache Thrift

  In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

  Apache Apache Thrift thrift github.com/apache/thrift Debian Go
  Oct 28, 2019
• High 7.5
  CVE-2020-7238

  HTTP Request Smuggling in Netty

  Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

  netty netty io.netty:netty-handler netty-3.9 Debian Ubuntu Maven
  Jan 27, 2020
• High 7.4
  CVE-2019-14887

  A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly c…

  Red Hat wildfly
  Mar 16, 2020
• High 7.3
  CVE-2019-10086 EPSS 29%

  Insecure Deserialization in Apache Commons Beanutils

  In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default chara…

  Apache Apache Commons Beanutils trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Aug 20, 2019
• Medium 5.5
  CVE-2019-12400

  Improper input validation in Apache Santuario XML Security for Java

  In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread…

  Apache Apache Santuario - XML Security for Java org.apache.santuario:xmlsec libxml-security-java Debian Ubuntu Maven
  Aug 23, 2019
• Medium —
  CVE-2019-20445 EPSS 14%

  HTTP Request Smuggling in Netty

  HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

  druid netty netty io.netty:netty-handler Debian Ubuntu Wolfi Maven
  Jan 29, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764607
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764612
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764658
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1767483
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1772008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1796225
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1798509
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1798524
• article
  https://issues.redhat.com/browse/JBEAP-16051
• article
  https://issues.redhat.com/browse/JBEAP-17386
• article
  https://issues.redhat.com/browse/JBEAP-17683
• article
  https://issues.redhat.com/browse/JBEAP-17963
• article
  https://issues.redhat.com/browse/JBEAP-18008
• article
  https://issues.redhat.com/browse/JBEAP-18150
• article
  https://issues.redhat.com/browse/JBEAP-18160
• article
  https://issues.redhat.com/browse/JBEAP-18164
• article
  https://issues.redhat.com/browse/JBEAP-18220
• article
  https://issues.redhat.com/browse/JBEAP-18274
• article
  https://issues.redhat.com/browse/JBEAP-18284
• article
  https://issues.redhat.com/browse/JBEAP-18292
• article
  https://issues.redhat.com/browse/JBEAP-18318
• article
  https://issues.redhat.com/browse/JBEAP-18327
• article
  https://issues.redhat.com/browse/JBEAP-18404
• article
  https://issues.redhat.com/browse/JBEAP-18437
• article
  https://issues.redhat.com/browse/JBEAP-18504
• article
  https://issues.redhat.com/browse/JBEAP-18699
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0804.json
• report
  https://access.redhat.com/security/cve/CVE-2019-0205
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0205
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0205
• report
  https://access.redhat.com/security/cve/CVE-2019-0210
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0210
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0210
• report
  https://access.redhat.com/security/cve/CVE-2019-10086
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10086
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10086