Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release

Fixed packages 30

Vulnerabilities 6

• High 7.5
  CVE-2021-23840 Public exploit EPSS 51%

  Integer overflow in CipherUpdate

  Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the …

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  Feb 16, 2021
• High 7.5
  CVE-2021-42340 EPSS 12%

  DoS via memory leak with WebSocket connections

  The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket c…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Maven
  Oct 14, 2021
• High 7.4
  CVE-2021-3712 Public exploit EPSS 48%

  Read buffer overruns processing ASN.1 strings

  ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  Aug 24, 2021
• Medium 6.5
  CVE-2021-30640

  Auth weakness in JNDIRealm

  A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 t…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Jul 12, 2021
• Medium 5.9
  CVE-2021-23841 Public exploit

  Null pointer deref in X509_issuer_and_serial_hash()

  The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing …

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  Feb 16, 2021
• Medium 5.3
  CVE-2021-33037 EPSS 75%

  Incorrect Transfer-Encoding handling with HTTP/1.0

  Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - T…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Jul 12, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1981533
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1981544
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014356
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4861.json
• report
  https://access.redhat.com/security/cve/CVE-2021-3712
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995634
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3712
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3712
• article
  https://www.openssl.org/news/secadv/20210824.txt
• report
  https://access.redhat.com/security/cve/CVE-2021-23840
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930324
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23840
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23840
• article
  https://www.openssl.org/news/secadv/20210216.txt
• report
  https://access.redhat.com/security/cve/CVE-2021-23841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930310
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23841
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23841
• report
  https://access.redhat.com/security/cve/CVE-2021-30640
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-30640
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-30640
• report
  https://access.redhat.com/security/cve/CVE-2021-33037
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33037
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33037
• report
  https://access.redhat.com/security/cve/CVE-2021-42340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-42340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-42340
• article
  http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.12
• article
  http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.0-M6
• article
  http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.72
• article
  http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.54
• article
  https://lists.apache.org/thread.html/r83a35be60f06aca2065f188ee542b9099695d57ced2e70e0885f905c%40%3Cannounce.tomcat.apache.org%3E