CVE-2016-8657
First published: Mon Oct 10 2016(Updated: )
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/jbossas | <0:5.2.0-23.ep5.el5 | 0:5.2.0-23.ep5.el5 |
| redhat/jbossas | <0:5.2.0-23.ep5.el6 | 0:5.2.0-23.ep5.el6 |
| redhat/apache-cxf | <0:2.7.18-6.SP5_redhat_1.1.ep6.el5 | 0:2.7.18-6.SP5_redhat_1.1.ep6.el5 |
| redhat/hornetq | <0:2.3.25-19.SP17_redhat_1.1.ep6.el5 | 0:2.3.25-19.SP17_redhat_1.1.ep6.el5 |
| redhat/infinispan | <0:5.2.21-1.Final_redhat_1.1.ep6.el5 | 0:5.2.21-1.Final_redhat_1.1.ep6.el5 |
| redhat/jboss-as-appclient | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-appclient | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-bundles | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-cli | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-client-all | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-clustering | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-cmp | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-configadmin | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-connector | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-controller-client | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-core | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-core-security | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-deployment-repository | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-deployment-scanner | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-domain | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-domain-http | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-domain-management | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-ee | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-ee-deployment | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-ejb3 | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-embedded | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-host-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jacorb | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-javadocs | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jaxr | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jaxrs | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jdr | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jmx | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jpa | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jsf | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-jsr77 | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-logging | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-mail | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-management-client-content | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-messaging | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-modcluster | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-modules-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-naming | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-network | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-osgi | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-osgi-configadmin | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-osgi-service | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-picketlink | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-platform-mbean | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-pojo | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-process-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-product-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-protocol | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-remoting | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-sar | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-security | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-server | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-standalone | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-system-jmx | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-threads | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-transactions | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-version | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-web | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-webservices | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossas-welcome-content-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-weld | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-as-xts | <0:7.5.14-2.Final_redhat_2.1.ep6.el5 | 0:7.5.14-2.Final_redhat_2.1.ep6.el5 |
| redhat/jboss-modules | <0:1.3.8-1.Final_redhat_1.1.ep6.el5 | 0:1.3.8-1.Final_redhat_1.1.ep6.el5 |
| redhat/jboss-msc | <0:1.1.7-1.SP1_redhat_1.1.ep6.el5 | 0:1.1.7-1.SP1_redhat_1.1.ep6.el5 |
| redhat/jboss-remoting3 | <0:3.3.9-1.Final_redhat_1.1.ep6.el5 | 0:3.3.9-1.Final_redhat_1.1.ep6.el5 |
| redhat/jbossts | <1:4.17.39-1.Final_redhat_1.1.ep6.el5 | 1:4.17.39-1.Final_redhat_1.1.ep6.el5 |
| redhat/jbossweb | <0:7.5.21-2.Final_redhat_2.1.ep6.el5 | 0:7.5.21-2.Final_redhat_2.1.ep6.el5 |
| redhat/picketbox | <0:4.1.4-1.Final_redhat_1.1.ep6.el5 | 0:4.1.4-1.Final_redhat_1.1.ep6.el5 |
| redhat/resteasy | <0:2.3.17-1.Final_redhat_1.1.ep6.el5 | 0:2.3.17-1.Final_redhat_1.1.ep6.el5 |
| redhat/weld-core | <0:1.1.34-1.Final_redhat_1.1.ep6.el5 | 0:1.1.34-1.Final_redhat_1.1.ep6.el5 |
| redhat/apache-cxf | <0:2.7.18-6.SP5_redhat_1.1.ep6.el6 | 0:2.7.18-6.SP5_redhat_1.1.ep6.el6 |
| redhat/hornetq | <0:2.3.25-19.SP17_redhat_1.1.ep6.el6 | 0:2.3.25-19.SP17_redhat_1.1.ep6.el6 |
| redhat/infinispan | <0:5.2.21-1.Final_redhat_1.1.ep6.el6 | 0:5.2.21-1.Final_redhat_1.1.ep6.el6 |
| redhat/jboss-as-appclient | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-appclient | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-bundles | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-cli | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-client-all | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-clustering | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-cmp | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-configadmin | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-connector | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-controller-client | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-core | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-core-security | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-deployment-repository | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-deployment-scanner | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-domain | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-domain-http | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-domain-management | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-ee | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-ee-deployment | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-ejb3 | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-embedded | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-host-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jacorb | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-javadocs | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jaxr | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jaxrs | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jdr | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jmx | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jpa | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jsf | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-jsr77 | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-logging | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-mail | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-management-client-content | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-messaging | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-modcluster | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-modules-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-naming | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-network | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-osgi | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-osgi-configadmin | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-osgi-service | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-picketlink | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-platform-mbean | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-pojo | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-process-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-product-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-protocol | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-remoting | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-sar | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-security | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-server | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-standalone | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-system-jmx | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-threads | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-transactions | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-version | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-web | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-webservices | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossas-welcome-content-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-weld | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-as-xts | <0:7.5.14-2.Final_redhat_2.1.ep6.el6 | 0:7.5.14-2.Final_redhat_2.1.ep6.el6 |
| redhat/jboss-modules | <0:1.3.8-1.Final_redhat_1.1.ep6.el6 | 0:1.3.8-1.Final_redhat_1.1.ep6.el6 |
| redhat/jboss-msc | <0:1.1.7-1.SP1_redhat_1.1.ep6.el6 | 0:1.1.7-1.SP1_redhat_1.1.ep6.el6 |
| redhat/jboss-remoting3 | <0:3.3.9-1.Final_redhat_1.1.ep6.el6 | 0:3.3.9-1.Final_redhat_1.1.ep6.el6 |
| redhat/jbossts | <1:4.17.39-1.Final_redhat_1.1.ep6.el6 | 1:4.17.39-1.Final_redhat_1.1.ep6.el6 |
| redhat/jbossweb | <0:7.5.21-2.Final_redhat_2.1.ep6.el6 | 0:7.5.21-2.Final_redhat_2.1.ep6.el6 |
| redhat/picketbox | <0:4.1.4-1.Final_redhat_1.1.ep6.el6 | 0:4.1.4-1.Final_redhat_1.1.ep6.el6 |
| redhat/resteasy | <0:2.3.17-1.Final_redhat_1.1.ep6.el6 | 0:2.3.17-1.Final_redhat_1.1.ep6.el6 |
| redhat/weld-core | <0:1.1.34-1.Final_redhat_1.1.ep6.el6 | 0:1.1.34-1.Final_redhat_1.1.ep6.el6 |
| redhat/jboss-ec2-eap | <0:7.5.14-2.Final_redhat_2.ep6.el6 | 0:7.5.14-2.Final_redhat_2.ep6.el6 |
| redhat/apache-cxf | <0:2.7.18-6.SP5_redhat_1.1.ep6.el7 | 0:2.7.18-6.SP5_redhat_1.1.ep6.el7 |
| redhat/hornetq | <0:2.3.25-19.SP17_redhat_1.1.ep6.el7 | 0:2.3.25-19.SP17_redhat_1.1.ep6.el7 |
| redhat/infinispan | <0:5.2.21-1.Final_redhat_1.1.ep6.el7 | 0:5.2.21-1.Final_redhat_1.1.ep6.el7 |
| redhat/jboss-as-appclient | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-appclient | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-bundles | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-cli | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-client-all | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-clustering | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-cmp | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-configadmin | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-connector | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-controller-client | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-core | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-core-security | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-deployment-repository | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-deployment-scanner | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-domain | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-domain-http | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-domain-management | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-ee | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-ee-deployment | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-ejb3 | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-embedded | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-host-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jacorb | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-javadocs | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jaxr | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jaxrs | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jdr | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jmx | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jpa | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jsf | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-jsr77 | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-logging | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-mail | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-management-client-content | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-messaging | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-modcluster | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-modules-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-naming | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-network | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-osgi | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-osgi-configadmin | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-osgi-service | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-picketlink | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-platform-mbean | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-pojo | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-process-controller | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-product-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-protocol | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-remoting | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-sar | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-security | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-server | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-standalone | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-system-jmx | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-threads | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-transactions | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-version | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-web | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-webservices | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossas-welcome-content-eap | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-weld | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-as-xts | <0:7.5.14-2.Final_redhat_2.1.ep6.el7 | 0:7.5.14-2.Final_redhat_2.1.ep6.el7 |
| redhat/jboss-modules | <0:1.3.8-1.Final_redhat_1.1.ep6.el7 | 0:1.3.8-1.Final_redhat_1.1.ep6.el7 |
| redhat/jboss-msc | <0:1.1.7-1.SP1_redhat_1.1.ep6.el7 | 0:1.1.7-1.SP1_redhat_1.1.ep6.el7 |
| redhat/jboss-remoting3 | <0:3.3.9-1.Final_redhat_1.1.ep6.el7 | 0:3.3.9-1.Final_redhat_1.1.ep6.el7 |
| redhat/jbossts | <1:4.17.39-1.Final_redhat_1.1.ep6.el7 | 1:4.17.39-1.Final_redhat_1.1.ep6.el7 |
| redhat/jbossweb | <0:7.5.21-2.Final_redhat_2.1.ep6.el7 | 0:7.5.21-2.Final_redhat_2.1.ep6.el7 |
| redhat/picketbox | <0:4.1.4-1.Final_redhat_1.1.ep6.el7 | 0:4.1.4-1.Final_redhat_1.1.ep6.el7 |
| redhat/resteasy | <0:2.3.17-1.Final_redhat_1.1.ep6.el7 | 0:2.3.17-1.Final_redhat_1.1.ep6.el7 |
| redhat/weld-core | <0:1.1.34-1.Final_redhat_1.1.ep6.el7 | 0:1.1.34-1.Final_redhat_1.1.ep6.el7 |
| Redhat Jboss Enterprise Application Platform | =6.0.0 | |
| Redhat Jboss Enterprise Application Platform | =6.4.0 | |
| Redhat Enterprise Linux | =5 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Jboss Enterprise Application Platform | =5.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2017-0826.html
- http://rhn.redhat.com/errata/RHSA-2017-0827.html
- http://rhn.redhat.com/errata/RHSA-2017-0828.html
- http://rhn.redhat.com/errata/RHSA-2017-0829.html
- http://www.securityfocus.com/bid/96896
- https://access.redhat.com/errata/RHSA-2018:1609
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657
- https://rhn.redhat.com/errata/RHSA-2017-0517.html
- https://rhn.redhat.com/errata/RHSA-2017-0828.html
- https://rhn.redhat.com/errata/RHSA-2017-0827.html
- https://rhn.redhat.com/errata/RHSA-2017-0826.html
- https://rhn.redhat.com/errata/RHSA-2017-0829.html
- https://access.redhat.com/security/cve/CVE-2016-6325
- https://access.redhat.com/security/cve/CVE-2016-8567
- https://access.redhat.com/articles/3016681
- https://access.redhat.com/security/cve/cve-2016-8657
- https://bugzilla.redhat.com/show_bug.cgi?id=1400343
- https://www.cve.org/CVERecord?id=CVE-2016-8657 https://nvd.nist.gov/vuln/detail/CVE-2016-8657
- https://access.redhat.com/errata/RHSA-2017:0826
- https://access.redhat.com/errata/RHSA-2017:0827
- https://access.redhat.com/errata/RHSA-2017:0829
- https://access.redhat.com/errata/RHSA-2017:0828
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-8657
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/trending
- package-manager/redhat
- vendor/redhat
- canonical/redhat jboss enterprise application platform
- version/redhat jboss enterprise application platform/6.0.0
- version/redhat jboss enterprise application platform/6.4.0
- canonical/redhat enterprise linux
- version/redhat enterprise linux/5
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/7.0
- version/redhat jboss enterprise application platform/5.0.0