REDHAT-BUG-1408305: Medium severity red hat jboss core services vulnerability
It was found that Red Hat JBoss Core Services incorrectly included CVE-2016-3705 as resolved in Apache HTTP 2.4.23 (erratum RHSA-2016:2957). The release did not include the fix to libxml2, leaving it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for CVE-2016-3705.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1408305?
REDHAT-BUG-1408305 is classified as a medium severity vulnerability that could lead to Denial of Service.
How do I fix REDHAT-BUG-1408305?
To mitigate the effects of REDHAT-BUG-1408305, upgrade your libxml2 to a patched version provided by your vendor.
What software is affected by REDHAT-BUG-1408305?
REDHAT-BUG-1408305 impacts Red Hat JBoss Core Services, Apache HTTP Server, and libxml2.
What vulnerability does REDHAT-BUG-1408305 relate to?
REDHAT-BUG-1408305 is related to the unresolved issue in libxml2 associated with CVE-2016-3705.
Is there a workaround for REDHAT-BUG-1408305?
Currently, there are no recommended workarounds for REDHAT-BUG-1408305; updating the affected software is essential.