Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 7.5
  CVE-2021-3690

  Undertow vulnerable to memory exhaustion due to buffer leak

  A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  Aug 23, 2022
• Medium 5.9
  CVE-2021-3597

  undertow Race Condition vulnerability

  A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1…

  undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  May 24, 2022
• Medium 5.3
  CVE-2021-28170

  Improper Input Validation in Jakarta Expression Language

  In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

  The Eclipse Foundation Jakarta Expression Language Implementation jakarta-el-api org.glassfish:jakarta.el Debian Ubuntu Maven
  May 26, 2021
• Low 3.3
  CVE-2021-3644

  wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault

  A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should no…

  org.wildfly.core:wildfly-server Maven
  Aug 26, 2022

Revision history

1. 2025-06-24 #10

   Neue Updates von Red Hat aufgenommen

2. 2022-10-31 #9

   Neue Updates von HITACHI aufgenommen

3. 2022-08-04 #8

   Neue Updates von NetApp aufgenommen

4. 2022-04-12 #7

   Neue Updates von Red Hat aufgenommen

5. 2022-03-22 #6

   Neue Updates von Red Hat aufgenommen

6. 2022-02-21 #5

   Neue Updates von Red Hat aufgenommen

7. 2021-09-23 #4

   Neue Updates von Red Hat aufgenommen

8. 2021-09-13 #3

   Neue Updates von Red Hat aufgenommen

9. 2021-09-09 #2

   BSI-Risiko geändert zu hoch.

10. 2021-09-08 #1

    Initiale Fassung

References

• Red Hat Security Advisory vom 2021-09-08
  https://access.redhat.com/errata/RHSA-2021:3466
• Red Hat Security Advisory vom 2021-09-08
  https://access.redhat.com/errata/RHSA-2021:3467
• Red Hat Security Advisory vom 2021-09-08
  https://access.redhat.com/errata/RHSA-2021:3468
• Red Hat Security Advisory vom 2021-09-08
  https://access.redhat.com/errata/RHSA-2021:3471
• Red Hat Security Advisory RHSA-2021:3516 vom 2021-09-13
  https://access.redhat.com/errata/RHSA-2021:3516
• Red Hat Security Advisory RHSA-2021:3658 vom 2021-09-23
  https://access.redhat.com/errata/RHSA-2021:3658
• Red Hat Security Advisory RHSA-2021:3660 vom 2021-09-23
  https://access.redhat.com/errata/RHSA-2021:3660
• Red Hat Security Advisory RHSA-2021:3656 vom 2021-09-23
  https://access.redhat.com/errata/RHSA-2021:3656
• Red Hat Security Advisory RHSA-2022:0589 vom 2022-02-21
  https://access.redhat.com/errata/RHSA-2022:0589
• Red Hat Security Advisory RHSA-2022:1013 vom 2022-03-22
  https://access.redhat.com/errata/RHSA-2022:1013
• Red Hat Security Advisory RHSA-2022:1029 vom 2022-03-23
  https://access.redhat.com/errata/RHSA-2022:1029
• Red Hat Security Advisory RHSA-2022:1179 vom 2022-04-13
  https://access.redhat.com/errata/RHSA-2022:1179
• NetApp Security Advisory NTAP-20220804-0003 vom 2022-08-04
  https://security.netapp.com/advisory/ntap-20220804-0003/
• Hitachi Vulnerability Information HITACHI-SEC-2022-136 vom 2022-11-01
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-136/index.html
• Red Hat Security Advisory RHSA-2025:9582 vom 2025-06-25
  https://access.redhat.com/errata/RHSA-2025:9582