Medium WID-SEC-2025-1533 3 CVEs

Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen

Published Mar 14, 2017 · Updated Jul 10, 2025 · Revision 9 · de-DE

Vendor: Red Hat Vendor: Ubuntu Product: Enterprise Linux Product: JBoss Enterprise Application Platform Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code mit Root Rechten zur Ausführung zu bringen.

Product

JBoss Enterprise Application Platform ist eine skalierbare Plattform für Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.

Vulnerabilities 3

High 7.5

CVE-2016-6346

Denial of service in JBoss resteasy

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

resteasy resteasy3.0 org.jboss.resteasy:resteasy-jaxrs Debian Ubuntu Maven

Sep 7, 2016
Unscored —

CVE-2016-8657

It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/…

Jul 31, 2018
Unscored —

CVE-2017-6056

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP eng…

tomcat7 tomcat6 Ubuntu

Feb 17, 2017

Revision history

2025-07-10 #9
Neue Updates von Ubuntu aufgenommen
2018-07-05 #8
New remediations available
2018-05-17 #7
New remediations available
2018-01-03 #6
New remediations available
2017-07-04 #4
New remediations available
2017-07-04 #5
New remediations available
2017-03-22 #3
New remediations available
2017-03-14 #1
Initial Release
2017-03-14 #2
Version nicht vorhanden

References

Red Hat Security Advisory RHSA-2017:0517 vom 2017-03-14
https://rhn.redhat.com/errata/RHSA-2017-0517.html
Red Hat Security Advisory RHSA-2017:0828 vom 2017-03-22
https://access.redhat.com/errata/RHSA-2017:0828
Red Hat Security Advisory RHSA-2017:0827 vom 2017-03-22
https://access.redhat.com/errata/RHSA-2017:0827
Red Hat Security Advisory RHSA-2017:0826 vom 2017-03-22
https://access.redhat.com/errata/RHSA-2017:0826
RedHat Security Advisoriy RHSA-2017:1675
https://access.redhat.com/errata/RHSA-2017:1675
RedHat Security Advisory: RHSA-2017:1676
https://access.redhat.com/errata/RHSA-2017:1676
Red Hat Security Advisory RHSA-2018:0005 vom 2018-01-03
https://access.redhat.com/errata/RHSA-2018:0005
Red Hat Security Advisory RHSA-2018:0004 vom 2018-01-03
https://access.redhat.com/errata/RHSA-2018:0004
Red Hat Security Advisory RHSA-2018:0003 vom 2018-01-03
https://access.redhat.com/errata/RHSA-2018:0003
Red Hat Security Advisory RHSA-2018:0002 vom 2018-01-03
https://access.redhat.com/errata/RHSA-2018:0002
Red Hat Security Advisory RHSA-2018:1609 vom 2018-05-18
https://access.redhat.com/errata/RHSA-2018:1609
Red Hat Security Advisory RHSA-2018:2143 vom 2018-07-06
https://access.redhat.com/errata/RHSA-2018:2143
Ubuntu Security Notice USN-7630-1 vom 2025-07-11
https://ubuntu.com/security/notices/USN-7630-1