CVE-2013-4002: Input Validation
A denial of service flaw was found in the way the JRE processes XML. A remote attacker could use this flaw to supply crafted XML that would lead to a denial of service.
Other sources
A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU.
XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4 - Upgrade
Upgrade
redhat/xerces-j2to a version that resolves this vulnerability.Fixed in 0:2.7.1-12.7.el6_5 - Upgrade
Upgrade
redhat/xerces-j2to a version that resolves this vulnerability.Fixed in 0:2.11.0-17.el7_0 - Upgrade
Upgrade
redhat/apache-cxfto a version that resolves this vulnerability.Fixed in 0:2.7.12-1.SP1_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/apache-cxf-xjc-utilsto a version that resolves this vulnerability.Fixed in 0:2.6.2-3.redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/hibernate4-eap6to a version that resolves this vulnerability.Fixed in 0:4.2.14-9.SP4_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/ironjacamar-eap6to a version that resolves this vulnerability.Fixed in 0:1.0.28-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/javassist-eap6to a version that resolves this vulnerability.Fixed in 0:3.18.1-5.GA_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-appclientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-appclientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-bundlesto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-clito a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-client-allto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-clusteringto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-cmpto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-configadminto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-connectorto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-consoleto a version that resolves this vulnerability.Fixed in 0:2.2.11-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-controller-clientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-coreto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-core-securityto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-deployment-repositoryto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-deployment-scannerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-domainto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-domain-httpto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-domain-managementto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-eeto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-ee-deploymentto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-ejb3to a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-embeddedto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-host-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jacorbto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-javadocsto a version that resolves this vulnerability.Fixed in 0:7.4.2-2.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jaxrto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jaxrsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jdrto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jmxto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jpato a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jsfto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jsr77to a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-loggingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-mailto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-management-client-contentto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-messagingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-modclusterto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-modules-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-2.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-namingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-networkto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-osgito a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-osgi-configadminto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-osgi-serviceto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-picketlinkto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-platform-mbeanto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-pojoto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-process-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-product-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-protocolto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-remotingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-sarto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-securityto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-serverto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-standaloneto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-system-jmxto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-threadsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-transactionsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-versionto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-webto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-webservicesto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-welcome-content-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-weldto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-xtsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-halto a version that resolves this vulnerability.Fixed in 0:2.2.11-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:1.5.2-2.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-metadatato a version that resolves this vulnerability.Fixed in 0:7.1.2-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-remoting3-jmxto a version that resolves this vulnerability.Fixed in 0:1.1.3-1.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossws-commonto a version that resolves this vulnerability.Fixed in 0:2.3.1-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossws-cxfto a version that resolves this vulnerability.Fixed in 0:4.3.1-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.0.11-1.GA_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/nettyto a version that resolves this vulnerability.Fixed in 0:3.6.10-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/picketlink-bindingsto a version that resolves this vulnerability.Fixed in 0:2.5.3-11.SP12_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/picketlink-federationto a version that resolves this vulnerability.Fixed in 0:2.5.3-12.SP12_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/resteasyto a version that resolves this vulnerability.Fixed in 0:2.3.8-10.SP3_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/weld-coreto a version that resolves this vulnerability.Fixed in 0:1.1.25-1.Final_redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/wss4jto a version that resolves this vulnerability.Fixed in 0:1.6.16-1.redhat_2.1.ep6.el5 - Upgrade
Upgrade
redhat/xerces-j2-eap6to a version that resolves this vulnerability.Fixed in 0:2.9.1-17.redhat_6.1.ep6.el5 - Upgrade
Upgrade
redhat/xml-securityto a version that resolves this vulnerability.Fixed in 0:1.5.7-2.redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/apache-cxfto a version that resolves this vulnerability.Fixed in 0:2.7.12-1.SP1_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/apache-cxf-xjc-utilsto a version that resolves this vulnerability.Fixed in 0:2.6.2-3.redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/hibernate4-eap6to a version that resolves this vulnerability.Fixed in 0:4.2.14-9.SP4_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/ironjacamar-eap6to a version that resolves this vulnerability.Fixed in 0:1.0.28-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/javassist-eap6to a version that resolves this vulnerability.Fixed in 0:3.18.1-5.GA_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-appclientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-appclientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-bundlesto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-clito a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-client-allto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-clusteringto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-cmpto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-configadminto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-connectorto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-consoleto a version that resolves this vulnerability.Fixed in 0:2.2.11-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-controller-clientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-coreto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-core-securityto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-deployment-repositoryto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-deployment-scannerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-domainto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-domain-httpto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-domain-managementto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-eeto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-ee-deploymentto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-ejb3to a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-embeddedto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-host-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jacorbto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-javadocsto a version that resolves this vulnerability.Fixed in 0:7.4.2-2.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jaxrto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jaxrsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jdrto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jmxto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jpato a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jsfto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jsr77to a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-loggingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-mailto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-management-client-contentto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-messagingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-modclusterto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-modules-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-2.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-namingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-networkto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-osgito a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-osgi-configadminto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-osgi-serviceto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-picketlinkto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-platform-mbeanto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-pojoto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-process-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-product-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-protocolto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-remotingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-sarto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-securityto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-serverto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-standaloneto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-system-jmxto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-threadsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-transactionsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-versionto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-webto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-webservicesto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-welcome-content-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-weldto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-xtsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-halto a version that resolves this vulnerability.Fixed in 0:2.2.11-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:1.5.2-2.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-metadatato a version that resolves this vulnerability.Fixed in 0:7.1.2-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-remoting3-jmxto a version that resolves this vulnerability.Fixed in 0:1.1.3-1.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossws-commonto a version that resolves this vulnerability.Fixed in 0:2.3.1-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossws-cxfto a version that resolves this vulnerability.Fixed in 0:4.3.1-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.0.11-1.GA_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/nettyto a version that resolves this vulnerability.Fixed in 0:3.6.10-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/picketlink-bindingsto a version that resolves this vulnerability.Fixed in 0:2.5.3-11.SP12_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/picketlink-federationto a version that resolves this vulnerability.Fixed in 0:2.5.3-12.SP12_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/resteasyto a version that resolves this vulnerability.Fixed in 0:2.3.8-10.SP3_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/weld-coreto a version that resolves this vulnerability.Fixed in 0:1.1.25-1.Final_redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/wss4jto a version that resolves this vulnerability.Fixed in 0:1.6.16-1.redhat_2.1.ep6.el6 - Upgrade
Upgrade
redhat/xerces-j2-eap6to a version that resolves this vulnerability.Fixed in 0:2.9.1-17.redhat_6.1.ep6.el6 - Upgrade
Upgrade
redhat/xml-securityto a version that resolves this vulnerability.Fixed in 0:1.5.7-2.redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/apache-cxfto a version that resolves this vulnerability.Fixed in 0:2.7.12-1.SP1_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/apache-cxf-xjc-utilsto a version that resolves this vulnerability.Fixed in 0:2.6.2-3.redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/hibernate4-eap6to a version that resolves this vulnerability.Fixed in 0:4.2.14-9.SP4_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/ironjacamar-eap6to a version that resolves this vulnerability.Fixed in 0:1.0.28-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/javassist-eap6to a version that resolves this vulnerability.Fixed in 0:3.18.1-5.GA_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-appclientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-appclientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-bundlesto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-clito a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-client-allto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-clusteringto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-cmpto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-configadminto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-connectorto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-consoleto a version that resolves this vulnerability.Fixed in 0:2.2.11-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-controller-clientto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-coreto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-core-securityto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-deployment-repositoryto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-deployment-scannerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-domainto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-domain-httpto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-domain-managementto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-eeto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-ee-deploymentto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-ejb3to a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-embeddedto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-host-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jacorbto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-javadocsto a version that resolves this vulnerability.Fixed in 0:7.4.2-2.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jaxrto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jaxrsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jdrto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jmxto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jpato a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jsfto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jsr77to a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-loggingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-mailto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-management-client-contentto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-messagingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-modclusterto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-modules-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-2.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-namingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-networkto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-osgito a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-osgi-configadminto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-osgi-serviceto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-picketlinkto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-platform-mbeanto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-pojoto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-process-controllerto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-product-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-protocolto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-remotingto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-sarto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-securityto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-serverto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-standaloneto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-system-jmxto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-threadsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-transactionsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-versionto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-webto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-webservicesto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-welcome-content-eapto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-weldto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-xtsto a version that resolves this vulnerability.Fixed in 0:7.4.2-3.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-halto a version that resolves this vulnerability.Fixed in 0:2.2.11-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:1.5.2-2.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-metadatato a version that resolves this vulnerability.Fixed in 0:7.1.2-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-remoting3-jmxto a version that resolves this vulnerability.Fixed in 0:1.1.3-1.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossws-commonto a version that resolves this vulnerability.Fixed in 0:2.3.1-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossws-cxfto a version that resolves this vulnerability.Fixed in 0:4.3.1-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.0.11-1.GA_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/nettyto a version that resolves this vulnerability.Fixed in 0:3.6.10-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/picketlink-bindingsto a version that resolves this vulnerability.Fixed in 0:2.5.3-11.SP12_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/picketlink-federationto a version that resolves this vulnerability.Fixed in 0:2.5.3-12.SP12_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/resteasyto a version that resolves this vulnerability.Fixed in 0:2.3.8-10.SP3_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/weld-coreto a version that resolves this vulnerability.Fixed in 0:1.1.25-1.Final_redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/wss4jto a version that resolves this vulnerability.Fixed in 0:1.6.16-1.redhat_2.1.ep6.el7 - Upgrade
Upgrade
redhat/xerces-j2-eap6to a version that resolves this vulnerability.Fixed in 0:2.9.1-17.redhat_6.1.ep6.el7 - Upgrade
Upgrade
redhat/xml-securityto a version that resolves this vulnerability.Fixed in 0:1.5.7-2.redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4 - Upgrade
Upgrade
maven/xerces:xercesImplto a version that resolves this vulnerability.Fixed in 2.12.0 - Upgrade
Upgrade
redhat/icedteato a version that resolves this vulnerability.Fixed in 2.4.3 - Upgrade
Upgrade
redhat/icedteato a version that resolves this vulnerability.Fixed in 1.11.14 - Upgrade
Upgrade
redhat/icedteato a version that resolves this vulnerability.Fixed in 1.12.7 - Upgrade
Upgrade
redhat/xerces-j2to a version that resolves this vulnerability.Fixed in 2.12.0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2013-4002?
CVE-2013-4002 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2013-4002?
To remediate CVE-2013-4002, update to the latest versions of the affected software packages as provided by Red Hat or your software vendor.
What products are affected by CVE-2013-4002?
CVE-2013-4002 specifically affects certain versions of IBM Java and Apache Xerces-J parser, among other related software products.
Can CVE-2013-4002 be exploited remotely?
Yes, CVE-2013-4002 can be exploited remotely by attackers sending crafted XML data.
What are the potential impacts of CVE-2013-4002?
The exploitation of CVE-2013-4002 can lead to a complete denial of service, impacting the availability of the affected systems.