Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.11 on RHEL 7 security update

Fixed packages 26

Vulnerabilities 14

• Critical 9.8
  CVE-2022-4492

  Undertow client not checking server identity presented by server certificate in https connections

  The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Feb 23, 2023
• High 7.5
  CVE-2020-13949

  Uncontrolled Resource Consumption in Apache Thrift

  In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

  druid trino trino-plugin-opensearch trino-plugin-lakehouse Debian Ubuntu Alpine Wolfi Maven
  Feb 12, 2021
• High 7.5
  CVE-2020-25644

  Wildfly-OpenSSL memory leak flaw

  A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.

  org.wildfly.openssl:wildfly-openssl-natives-parent Maven
  Oct 6, 2020
• High 7.5
  CVE-2020-27782

  Denial of service in Undertow

  A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerabilit…

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Feb 23, 2021
• High 7.5
  CVE-2020-36518 Public exploit

  Deeply nested json in jackson-databind

  jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Mar 11, 2022
• High 7.5
  CVE-2021-37136

  Bzip2Decoder doesn't allow setting size restrictions for decompressed data

  The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and…

  The Netty project Netty druid netty Debian Ubuntu Wolfi Maven
  Oct 19, 2021
• High 7.5
  CVE-2021-37137

  SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

  The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vu…

  The Netty project Netty druid netty Debian Ubuntu Wolfi Maven
  Oct 19, 2021
• High 7.5
  CVE-2023-5379

  Undertow: ajp request closes connection exceeding maxrequestsize

  A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP respons…

  Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat JBoss Enterprise Application Platform 7 Debian Ubuntu
  Dec 12, 2023
• High 7.4
  CVE-2020-25638

  SQL injection in hibernate-core

  A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an…

  org.hibernate:hibernate-core libhibernate3-java libhibernate3-java Debian Ubuntu Maven
  Dec 2, 2020
• High 7.4
  CVE-2022-3143

  Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator

  wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.…

  redhat.com Wildfly-elytron org.wildfly.security:wildfly-elytron Maven
  Jan 11, 2023
• High 7.3
  CVE-2024-1233

  Eap: wildfly-elytron has a ssrf security issue

  A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is performed on the destination URL address, which may result in a serv…

  Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 8 Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Maven
  Apr 9, 2024
• Medium 6.6
  CVE-2020-10740

  Wildfly Unsafe Deserialization Vulnerability

  A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

  [UNKNOWN] wildfly org.wildfly:wildfly-parent Maven
  Jun 22, 2020
• Medium 5.3
  CVE-2021-28170

  Improper Input Validation in Jakarta Expression Language

  In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

  The Eclipse Foundation Jakarta Expression Language Implementation org.glassfish:javax.el jakarta-el-api Debian Ubuntu Maven
  May 26, 2021
• Unscored —
  CVE-2022-1259

  A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause …

  undertow Ubuntu
  Aug 31, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1834512
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1881353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1885485
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1901304
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928172
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2004133
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2004135
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064698
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2072339
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2124682
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2153260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2242099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2262918
• article
  https://issues.redhat.com/browse/JBEAP-29413
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9582.json
• report
  https://access.redhat.com/security/cve/CVE-2020-10740
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-10740
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-10740
• report
  https://access.redhat.com/security/cve/CVE-2020-13949
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-13949
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-13949
• report
  https://access.redhat.com/security/cve/CVE-2020-25638
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25638
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25638
• report
  https://access.redhat.com/security/cve/CVE-2020-25644
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25644
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25644
• report
  https://access.redhat.com/security/cve/CVE-2020-27782
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27782
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27782
• report
  https://access.redhat.com/security/cve/CVE-2020-36518
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-36518
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-36518
• advisory
  https://github.com/advisories/GHSA-57j2-w4cx-62h2