REDHAT-BUG-2242099: Medium severity Red Hat JBoss EAP vulnerability
When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked as an error state by modcluster in httpd. The problem is that requests exceeding the max-header-size cause JBoss EAP to close the TCP connection without returning an AJP response.
A malicious user could exploit this behavior by repeatedly sending requests that exceed the max-header-size, it causes a denial-of-service attack. This is because modproxycluster marks JBoss instance as an error worker when the TCP connection is closed from the backend after sending the AJP request without receiving an AJP response, and stops forwarding.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2242099?
The severity of REDHAT-BUG-2242099 is classified as high due to the potential for service disruption and denial of service.
How do I fix REDHAT-BUG-2242099?
To fix REDHAT-BUG-2242099, increase the max-header-size attribute in the ajp-listener configuration to accommodate larger requests.
What causes the issue in REDHAT-BUG-2242099?
The issue in REDHAT-BUG-2242099 is caused by AJP requests exceeding the configured max-header-size, which leads to JBoss EAP closing the TCP connection.
Is REDHAT-BUG-2242099 exploitable?
Yes, REDHAT-BUG-2242099 is exploitable as it may allow attackers to disrupt services by sending oversized AJP requests.
Which software versions are affected by REDHAT-BUG-2242099?
REDHAT-BUG-2242099 affects Red Hat JBoss EAP across multiple versions that utilize the misconfigured ajp-listener.