Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update

Fixed packages 47

Vulnerabilities 14

• Critical 9.8
  CVE-2022-23221 Public exploit EPSS 65%

  Arbitrary code execution in H2 Console

  H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

  com.h2database:h2 h2database h2database Debian Ubuntu Maven
  Jan 19, 2022
• Critical 9.8
  CVE-2022-23305 Public exploit EPSS 67%

  SQL injection in JDBC Appender in Apache Log4j V1

  By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate…

  Apache Software Foundation Apache Log4j 1.x druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  Jan 18, 2022
• Critical 9.8
  CVE-2022-46364 Public exploit

  Apache CXF SSRF Vulnerability

  A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Dec 13, 2022
• Critical 9.3
  CVE-2024-28752 Public exploit

  Apache CXF SSRF Vulnerability using the Aegis databinding

  A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the …

  Apache Software Foundation Apache CXF opensearch-2 org.apache.cxf:cxf-rt-databinding-aegis Wolfi Maven
  Mar 15, 2024
• Critical 9.2
  CVE-2024-47561

  Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

  Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

  Apache Software Foundation Apache Avro Java SDK druid trino Wolfi Maven
  Oct 3, 2024
• High 8.8
  CVE-2022-23307 EPSS 54%

  A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

  CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

  Apache Software Foundation Apache Log4j 1.x druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  Jan 18, 2022
• High 8.0
  CVE-2022-41853 Public exploit

  Remote code execution in HyperSQL DataBase

  Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…

  HyperSQL DataBase hsqldb hsqldb org.hsqldb:hsqldb Debian Ubuntu Maven
  Oct 6, 2022
• High 7.5
  CVE-2021-3859

  Undertow vulnerable to Denial of Service (DoS) attacks

  A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Aug 26, 2022
• High 7.5
  CVE-2021-4104 Public exploit EPSS 81%

  Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

  JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to pe…

  Apache Software Foundation Apache Log4j 1.x druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  Dec 14, 2021
• High 7.5
  CVE-2022-34169 Public exploit EPSS 82%

  Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

  Apache Software Foundation Apache Xalan-J openjdk-8 openjdk-lts Debian Ubuntu Alpine Maven
  Jul 19, 2022
• High 7.5
  CVE-2023-26464

  Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender

  ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on wh…

  Apache Software Foundation Apache Log4j druid org.apache.logging.log4j:log4j-core Ubuntu Wolfi Maven
  Mar 10, 2023
• High 7.5
  CVE-2023-3171

  Eap-7: heap exhaustion via deserialization

  A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could ev…

  Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
  Dec 27, 2023
• High 7.5
  CVE-2023-39410

  Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

  When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11…

  Apache Software Foundation Apache Avro Java SDK druid tez Wolfi Maven PyPI
  Sep 29, 2023
• High 7.5
  CVE-2023-5685

  Xnio: stackoverflowexception when the chain of notifier states becomes problematically big

  A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Mar 22, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2010378
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2031667
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2041959
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2041967
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044596
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2108554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136141
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2155682
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182864
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2213639
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2242521
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270732
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2316116
• article
  https://issues.redhat.com/browse/JBEAP-23025
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10207.json
• report
  https://access.redhat.com/security/cve/CVE-2021-3859
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3859
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3859
• report
  https://access.redhat.com/security/cve/CVE-2021-4104
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-009
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4104
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4104
• article
  https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126
• article
  https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301
• article
  https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx
• article
  https://www.openwall.com/lists/oss-security/2021/12/13/1
• report
  https://access.redhat.com/security/cve/CVE-2022-23221
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23221
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23221
• advisory
  https://github.com/advisories/GHSA-45hx-wfhj-473x
• report
  https://access.redhat.com/security/cve/CVE-2022-23305
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23305
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23305
• article
  https://www.openwall.com/lists/oss-security/2022/01/18/4
• report
  https://access.redhat.com/security/cve/CVE-2022-23307