CVE-2016-9589 — Red Hat Wildfly DoS

Description

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) * "max-header-size" (default 1MB) per active TCP connection.

Affected products

Vendor	Product	Affected	Fixed
Red Hat	wildfly	11.0.0.Beta1	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
Red Hat Single Sign On 7	rh-sso7 +1	1-2.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-freemarker	2.3.23-1.redhat_2.2.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-javapackages-tools +1	3.4.1-5.15.3.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-keycloak +1	2.5.5-2.Final_redhat_1.1.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-libunix-dbus-java +1	0.8.0-2.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-liquibase +1	3.4.1-2.redhat_2.1.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-twitter4j +1	4.0.4-1.redhat_3.1.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat Single Sign On 7	rh-sso7-zxing +2	3.2.1-1.redhat_4.1.jbcs.el6	RHSA-2017:0873, RHSA-2017:0872
Red Hat JBoss EAP 7	eap7-activemq-artemis +14	1.1.0-16.SP19_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-activemq-artemis-jdbc-store	1.5.5.008-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-antlr	2.7.7-35.redhat_7.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-apache-commons-beanutils	1.9.3-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-apache-commons-cli	1.3.1-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-apache-commons-io	2.5.0-2.redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-apache-cxf +3	3.1.12-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-apache-mime4j	0.6.0-2.redhat_6.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-artemis-native +1	1.1.0-12.redhat_4.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-artemis-wildfly-integration	1.0.2-3.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-azure-storage	5.0.0-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-bouncycastle +3	1.56.0-4.redhat_2.2.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-codehaus-jackson +4	1.9.13-7.redhat_4.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-commons-logging-jboss-logmanager	1.0.2-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-cryptacular	1.2.0-3.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-cxf-xjc-dv +5	3.0.5-3.redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-ecj	4.6.1-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-elytron-web +1	1.0.1-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-glassfish-concurrent	1.0.0-3.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-glassfish-el +1	3.0.1-2.b08_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-glassfish-jaf	1.1.1-21.redhat_5.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-glassfish-javamail	1.5.6-4.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-glassfish-jsf	2.2.13-5.SP4_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-glassfish-json	1.0.4-4.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-guava +1	20.0.0-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-h2database	1.4.193-4.redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-hibernate +5	5.0.12-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-hibernate-commons-annotations	5.0.1-3.Final_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-hibernate-jpa-2.1-api	1.0.0-3.Final_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-hibernate-search +5	5.5.8-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-hibernate-validator +1	5.3.5-3.Final_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-httpcomponents-asyncclient	4.1.2-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-httpcomponents-client	4.5.2-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-httpcomponents-core	4.4.4-2.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-infinispan +5	8.1.7-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-ironjacamar +8	1.4.6-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jackson-core +9	2.8.9-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jandex	2.0.3-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jansi	1.16.0-5.redhat_4.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-java-classmate	1.3.3-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-javassist	3.20.0-2.GA_redhat_3.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jaxbintros	1.0.2-19.GA_redhat_8.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jaxen	1.1.6-3.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jberet +1	1.2.4-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-aesh	0.66.19-2.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-annotations-api_1.2_spec	1.0.0-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-classfilewriter	1.2.1-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-concurrency-api_1.0_spec	1.0.0-4.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-connector-api_1.7_spec	1.0.0-5.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-dmr	1.4.1-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-ec2-eap +1	7.0.5-1.GA_redhat_1.ep7.el6	RHSA-2017:3458, RHSA-2017:0834
Red Hat JBoss EAP 7	eap7-jboss-ejb-api_3.2_spec +4	1.0.0-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-ejb-client	4.0.9-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-ejb3-ext-api	2.2.0-4.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-el-api_3.0_spec	1.0.9-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-genericjms	2.0.0-4.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-iiop-client +1	1.0.1-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-invocation	1.5.0-5.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-jaxb-api_2.2_spec	1.0.4-6.Final_redhat_4.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-jaxrpc-api_1.1_spec	1.0.1-8.Final_redhat_5.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-jaxws-api_2.2_spec	2.0.4-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-jms-api_2.0_spec	1.0.1-4.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-jsf-api_2.2_spec	2.2.13-4.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-jsp-api_2.3_spec +2	1.0.1-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-logmanager	2.0.7-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-metadata +5	10.0.2-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-modules	1.6.0-11.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-msc	1.2.7-1.SP1_redhat_1.1.ep7.el6	RHSA-2017:0832, RHSA-2017:0831
Red Hat JBoss EAP 7	eap7-jboss-openjdk-orb	8.0.8-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-remoting	5.0.5-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-remoting-jmx	3.0.0-8.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-saaj-api_1.3_spec	1.0.4-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-seam-int	7.0.0-5.GA_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-security-xacml	2.0.8-16.Final_redhat_8.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-server-migration +18	1.0.3-4.Final_redhat_4.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-transaction-spi	7.6.0-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-vfs	3.2.12-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-websocket-api_1.1_spec	1.1.1-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-weld-2.2-api	2.4.0-2.SP1_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jboss-xnio-base	3.4.3-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-jbossws-common-tools	1.2.4-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jbossws-cxf	5.1.9-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jbossws-spi	3.1.4-3.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jettison	1.3.8-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jgroups	3.6.13-2.Final_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jgroups-azure	1.1.0-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-joda-time	2.9.7-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jsoup	1.8.3-3.redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-jul-to-slf4j-stub	1.0.1-6.Final_redhat_3.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-mod_cluster	1.3.7-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-mustache-java +1	0.9.4-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-narayana +10	5.2.22-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-neethi	3.0.3-3.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-netty +1	4.0.35-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-netty-xnio-transport	0.1.2-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-objectweb-asm	3.3.1-14.redhat_13.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-picketbox +1	5.0.2-2.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-picketbox-commons	1.0.0-3.final_redhat_5.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-picketlink-api +9	2.5.5-6.SP6_redhat_1.1.ep7.el6	RHSA-2017:0832, RHSA-2017:0831
Red Hat JBoss EAP 7	eap7-resteasy +17	3.0.19-3.SP1_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-shibboleth-java-support	7.1.1-3.redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-slf4j +3	1.7.22-2.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-snakeyaml	1.17.0-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-staxmapper	1.3.0-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-sun-saaj-1.3-impl	1.3.16-16.SP1_redhat_6.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-sun-ws-metadata-2.0-api	1.0.0-6.MR1_redhat_8.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-taglibs-standard-impl +3	1.2.6-1.RC1_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-txw2 +7	2.2.11-10.redhat_4.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-undertow	1.3.27-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-undertow-jastow +2	2.0.2-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-vdx +2	1.1.6-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-weld-core +3	2.4.3-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly +1	7.0.5-3.GA_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-wildfly-client-config	1.0.0-7.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-common	1.2.0-10.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-discovery +1	1.0.0-9.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-elytron	1.1.7-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-elytron-tool	1.0.5-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-http-client +4	1.0.8-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-javadocs	7.0.5-2.GA_redhat_2.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-wildfly-naming-client	1.0.7-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-openssl +2	1.0.2-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-openssl-linux	1.0.2-13.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wildfly-web-console-eap	2.8.29-1.Final_redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-woodstox-core	5.0.3-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-wss4j +6	2.1.10-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454
Red Hat JBoss EAP 7	eap7-xml-security	2.0.8-1.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454, RHSA-2017:0832
Red Hat JBoss EAP 7	eap7-xom	1.2.10-2.redhat_1.1.ep7.el6	RHSA-2017:3455, RHSA-2017:3454

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.wildfly:wildfly-undertow	< 11.0.0.Beta1	11.0.0.Beta1	GHSA-p4xg-cpr9-vwvj

Advisories 8

RHSA-2017:3458 Red Hat Security Advisory: eap7-jboss-ec2-eap security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2017:3455 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.0 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2017:3454 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.0 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2017:0834 Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.0.5 Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2017:0832 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.5 on RHEL 7 Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2017:0831 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.5 on RHEL 6 Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2017:0873 Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 7 Red Hat Security Advisories (RHSA) · Mar 18, 2026
RHSA-2017:0872 Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 6 Red Hat Security Advisories (RHSA) · Mar 18, 2026

References

RHSA-2017:0831 vendor-advisory
RHSA-2017:0876 vendor-advisory
RHSA-2017:0834 vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1404782
RHSA-2017:3458 vendor-advisory
RHSA-2017:0832 vendor-advisory
97060 vdb-entry
RHSA-2017:3455 vendor-advisory
RHSA-2017:3456 vendor-advisory
RHSA-2017:0873 vendor-advisory
RHSA-2017:3454 vendor-advisory
RHSA-2017:0830 vendor-advisory
RHSA-2017:0872 vendor-advisory