Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update

Fixed packages 17

Vulnerabilities 12

• Critical 9.8
  CVE-2022-23221 Public exploit EPSS 65%

  Arbitrary code execution in H2 Console

  H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

  com.h2database:h2 h2database h2database Debian Ubuntu Maven
  Jan 19, 2022
• Critical 9.8
  CVE-2022-46364 Public exploit

  Apache CXF SSRF Vulnerability

  A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Dec 13, 2022
• Critical 9.3
  CVE-2024-28752 Public exploit

  Apache CXF SSRF Vulnerability using the Aegis databinding

  A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the …

  Apache Software Foundation Apache CXF opensearch-2 org.apache.cxf:cxf-rt-databinding-aegis Wolfi Maven
  Mar 15, 2024
• Critical 9.2
  CVE-2024-47561

  Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

  Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

  Apache Software Foundation Apache Avro Java SDK druid trino Wolfi Maven
  Oct 3, 2024
• High 8.1
  CVE-2020-28052 Public exploit

  Logic error in Legion of the Bouncy Castle BC Java

  An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…

  bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on org.bouncycastle:bcprov-jdk15 Debian Maven
  Dec 18, 2020
• High 8.0
  CVE-2022-41853 Public exploit

  Remote code execution in HyperSQL DataBase

  Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…

  HyperSQL DataBase hsqldb hsqldb hsqldb Debian Ubuntu Maven
  Oct 6, 2022
• High 7.5
  CVE-2020-7238

  HTTP Request Smuggling in Netty

  Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

  netty netty io.netty:netty-handler netty-3.9 Debian Ubuntu Maven
  Jan 27, 2020
• High 7.5
  CVE-2022-34169 Public exploit EPSS 82%

  Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

  Apache Software Foundation Apache Xalan-J openjdk-8 openjdk-lts Debian Ubuntu Alpine Maven
  Jul 19, 2022
• High 7.5
  CVE-2023-26464

  Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender

  ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on wh…

  Apache Software Foundation Apache Log4j druid org.apache.logging.log4j:log4j-core Ubuntu Wolfi Maven
  Mar 10, 2023
• High 7.5
  CVE-2023-3171

  Eap-7: heap exhaustion via deserialization

  A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could ev…

  Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
  Dec 27, 2023
• High 7.5
  CVE-2023-39410

  Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

  When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11…

  Apache Software Foundation Apache Avro Java SDK druid tez Wolfi Maven PyPI
  Sep 29, 2023
• High 7.5
  CVE-2023-5685

  Xnio: stackoverflowexception when the chain of notifier states becomes problematically big

  A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Mar 22, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1796225
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1912881
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044596
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2108554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136141
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2155682
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182864
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2213639
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2242521
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270732
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2316116
• article
  https://issues.redhat.com/browse/JBEAP-27708
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10208.json
• report
  https://access.redhat.com/security/cve/CVE-2020-7238
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-7238
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-7238
• article
  https://netty.io/news/2019/12/18/4-1-44-Final.html
• report
  https://access.redhat.com/security/cve/CVE-2020-28052
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28052
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28052
• report
  https://access.redhat.com/security/cve/CVE-2022-23221
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23221
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23221
• advisory
  https://github.com/advisories/GHSA-45hx-wfhj-473x
• report
  https://access.redhat.com/security/cve/CVE-2022-34169
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-34169
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-34169
• report
  https://access.redhat.com/security/cve/CVE-2022-41853
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41853
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41853
• article
  http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control
• advisory
  https://github.com/advisories/GHSA-77xx-rxvh-q682
• report
  https://access.redhat.com/security/cve/CVE-2022-46364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46364
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46364