Description
The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss Web Platform 5 | jboss-remoting | 2.5.4-11.SP4_patch01.ep5.el5 | RHSA-2013:1370 |
| Red Hat JBoss EAP 5 | jboss-remoting | 2.5.4-11.SP4_patch01.ep5.el4 | RHSA-2013:1369 |
Advisories 2
- RHSA-2013:1369 Red Hat Security Advisory: jboss-remoting security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:1370 Red Hat Security Advisory: jboss-remoting security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
References
- RHSA-2013:1373 vendor-advisory
- RHSA-2013:1369 vendor-advisory
- RHSA-2013:1372 vendor-advisory
- RHSA-2013:1370 vendor-advisory
- RHSA-2013:1371 vendor-advisory
- RHSA-2013:1448 vendor-advisory
- RHSA-2013:1374 vendor-advisory