Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update

Fixed packages 60

Vulnerabilities 7

• High 7.5
  CVE-2024-27316 Public exploit EPSS 89%

  Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

  HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Apr 4, 2024
• High 7.5
  CVE-2024-29857

  Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

  An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CP…

  druid tez bouncycastle bouncycastle Debian Ubuntu Wolfi Maven NuGet
  May 9, 2024
• High 7.5
  CVE-2024-30172

  Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

  An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

  bouncycastle bouncycastle opensearch-2 gradle-8 Debian Ubuntu Wolfi Maven NuGet
  May 9, 2024
• High 7.5
  CVE-2024-5971

  Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

  A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response.…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Jul 8, 2024
• Medium 5.9
  CVE-2024-30171

  Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

  An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

  druid tez bouncycastle bouncycastle Debian Ubuntu Wolfi Maven NuGet
  May 9, 2024
• Medium 5.3
  CVE-2024-29025

  Netty HttpPostRequestDecoder can OOM

  Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `HttpPostRequestDecoder` can be tricked to accumulate data. While the decoder can store items on the dis…

  netty netty druid netty Debian Ubuntu Wolfi Maven
  Mar 25, 2024
• Medium 5.3
  CVE-2024-3653

  Undertow: learningpushhandler can lead to remote memory dos attacks

  A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. I…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Jul 8, 2024

References

• article
  https://access.redhat.com/articles/7073034
• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2268277
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272907
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2274437
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2276360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2292211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2293025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2293028
• article
  https://issues.redhat.com/browse/JBEAP-26292
• article
  https://issues.redhat.com/browse/JBEAP-26835
• article
  https://issues.redhat.com/browse/JBEAP-27017
• article
  https://issues.redhat.com/browse/JBEAP-27056
• article
  https://issues.redhat.com/browse/JBEAP-27078
• article
  https://issues.redhat.com/browse/JBEAP-27079
• article
  https://issues.redhat.com/browse/JBEAP-27101
• article
  https://issues.redhat.com/browse/JBEAP-27181
• article
  https://issues.redhat.com/browse/JBEAP-27290
• article
  https://issues.redhat.com/browse/JBEAP-27352
• article
  https://issues.redhat.com/browse/JBEAP-27353
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5145.json
• report
  https://access.redhat.com/security/cve/CVE-2024-3653
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-3653
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-3653
• report
  https://access.redhat.com/security/cve/CVE-2024-5971
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-5971
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-5971
• report
  https://access.redhat.com/security/cve/CVE-2024-27316
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27316
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27316
• article
  https://httpd.apache.org/security/vulnerabilities_24.html
• article
  https://nowotarski.info/http2-continuation-flood/
• advisory
  https://www.kb.cert.org/vuls/id/421644
• report
  https://access.redhat.com/security/cve/CVE-2024-29025
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-29025
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-29025
• article
  https://gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3