CVE-2013-4210
First published: Tue Oct 01 2013(Updated: )
The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| JBoss Enterprise Application Platform | =5.0.0 | |
| Red Hat JBoss Enterprise BRMS Platform | =5.2.0 | |
| Red Hat JBoss Enterprise BRMS Platform | =5.3.0 | |
| Red Hat JBoss Enterprise SOA Platform | =5.3.0 | |
| Red Hat JBoss Enterprise SOA Platform | =5.3.1 | |
| Red Hat JBoss Enterprise Web Platform | =5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2013-1369.html
- http://rhn.redhat.com/errata/RHSA-2013-1370.html
- http://rhn.redhat.com/errata/RHSA-2013-1371.html
- http://rhn.redhat.com/errata/RHSA-2013-1372.html
- http://rhn.redhat.com/errata/RHSA-2013-1373.html
- http://rhn.redhat.com/errata/RHSA-2013-1374.html
- http://rhn.redhat.com/errata/RHSA-2013-1448.html
Frequently Asked Questions
What is the severity of CVE-2013-4210?
CVE-2013-4210 is classified as a moderate severity vulnerability.
How do I fix CVE-2013-4210?
To fix CVE-2013-4210, update to the latest patched version of the affected JBoss platforms.
What types of attacks does CVE-2013-4210 enable?
CVE-2013-4210 allows remote attackers to perform a denial of service by exhausting file descriptors.
Which JBoss versions are affected by CVE-2013-4210?
CVE-2013-4210 affects multiple versions including JBoss Enterprise Application Platform 5.0.0 and JBoss SOA Platform 5.3.1.
Can CVE-2013-4210 impact production environments?
Yes, CVE-2013-4210 can significantly impact production environments by causing service downtime.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/redhat
- canonical/jboss enterprise application platform
- version/jboss enterprise application platform/5.0.0
- canonical/red hat jboss enterprise brms platform
- version/red hat jboss enterprise brms platform/5.2.0
- version/red hat jboss enterprise brms platform/5.3.0
- canonical/red hat jboss enterprise soa platform
- version/red hat jboss enterprise soa platform/5.3.0
- version/red hat jboss enterprise soa platform/5.3.1
- canonical/red hat jboss enterprise web platform
- version/red hat jboss enterprise web platform/5.2.0