Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update

Fixed packages 26

Vulnerabilities 17

• High 7.7
  CVE-2022-25647 EPSS 12%

  Deserialization of Untrusted Data

  The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

  openjdk11 openjdk17 trino openjdk15 Debian Ubuntu Alpine Wolfi Maven
  May 1, 2022
• High 7.5
  CVE-2021-3690

  Undertow vulnerable to memory exhaustion due to buffer leak

  A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Aug 23, 2022
• High 7.5
  CVE-2021-37714

  Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

  jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to ge…

  jhy jsoup org.jsoup:jsoup jsoup Debian Ubuntu Azure Linux Maven
  Aug 18, 2021
• High 7.5
  CVE-2021-3859

  Undertow vulnerable to Denial of Service (DoS) attacks

  A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Aug 26, 2022
• High 7.5
  CVE-2021-40690

  Bypass of the secureValidation property

  All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abus…

  Apache Software Foundation Apache Santuario org.apache.santuario:xmlsec libxml-security-java Debian Ubuntu Maven
  Sep 19, 2021
• High 7.5
  CVE-2022-0084

  XNIO `notifyReadClosed` method logging message to unexpected end

  A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related perf…

  jboss-xnio jboss-xnio org.jboss.xnio:xnio-all Debian Ubuntu Maven
  Aug 26, 2022
• High 7.5
  CVE-2022-2053

  Undertow vulnerable to Dos via Large AJP request

  When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a fron…

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Aug 5, 2022
• High 7.5
  CVE-2022-23913

  Apache ActiveMQ Artemis DoS

  In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

  Apache Software Foundation Apache ActiveMQ Artemis org.apache.activemq:artemis-core-client Maven
  Feb 4, 2022
• High 7.5
  CVE-2022-24785 Public exploit EPSS 14%

  Path Traversal in Moment.js

  Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is direct…

  moment moment node-moment node-moment Debian Ubuntu npm NuGet
  Apr 4, 2022
• High 7.5
  CVE-2022-25857

  Denial of Service (DoS)

  The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

  management-api-for-apache-cassandra-5.0 management-api-for-apache-cassandra-5.0-compat org.yaml:snakeyaml snakeyaml Debian Ubuntu Wolfi Maven
  Aug 30, 2022
• High 7.5
  CVE-2023-1108

  Undertow: infinite loop in sslconduit during close

  A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Sep 14, 2023
• High 7.5
  CVE-2023-1973

  Undertow: unrestricted request storage leads to memory exhaustion

  A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server's memory.

  Red Hat Red Hat JBoss Enterprise Application Platform 7 Red Hat JBoss Enterprise Application Platform 8 Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Debian Ubuntu Maven
  Nov 7, 2024
• High 7.5
  CVE-2023-3223

  Undertow: outofmemoryerror due to @multipartconfig handling

  A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limi…

  Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 RHEL-8 based Middleware Containers Debian Ubuntu Maven
  Sep 27, 2023
• High 7.5
  CVE-2024-1635

  Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

  A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the…

  Red Hat Red Hat Data Grid 8 Red Hat JBoss Enterprise Application Platform 8 Red Hat Build of Keycloak Debian Ubuntu Maven
  Feb 19, 2024
• Medium 6.5
  CVE-2022-40149

  Stack Buffer Overflow in Jettison

  Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…

  Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  Sep 16, 2022
• Medium 6.5
  CVE-2022-40152 EPSS 18%

  Stack Buffer Overflow in Woodstox

  Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

  x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven
  Sep 16, 2022
• Unscored —
  CVE-2022-1319

  A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those pack…

  undertow undertow Debian Ubuntu
  Aug 31, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1991299
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995259
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2010378
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2011190
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2063601
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2072009
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2073890
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2080850
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2095862
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2126789
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134291
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2174246
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2185662
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2209689
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2264928
• article
  https://issues.redhat.com/browse/JBEAP-29286
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4226.json
• report
  https://access.redhat.com/security/cve/CVE-2021-3690
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3690
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3690
• report
  https://access.redhat.com/security/cve/CVE-2021-3859
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3859
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3859
• report
  https://access.redhat.com/security/cve/CVE-2021-37714
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-37714
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-37714
• article
  https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c
• report
  https://access.redhat.com/security/cve/CVE-2021-40690
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-40690
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-40690
• article
  https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E
• report
  https://access.redhat.com/security/cve/CVE-2022-0084
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-0084
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-0084