REDHAT-BUG-660623: Low severity red hat jboss enterprise application platform vulnerability
The JBoss EAP 430CP09 security updates for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5 and the Customer Support Portal did not, unlike the erratum text stated, provide a fix for CVE-2010-3862, a Denial-of-Service (DoS) flaw in the jboss-remoting component. A missing patch is considered a security regression, and requires a new CVE name. This regression is assigned CVE-2010-4265. It fixes the same issue as CVE-2010-3862 and is specific to JBoss EAP 430CP09.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-660623?
REDHAT-BUG-660623 is associated with a Denial-of-Service (DoS) vulnerability that can significantly impact the availability of services.
How do I fix REDHAT-BUG-660623?
To fix REDHAT-BUG-660623, ensure to update your JBoss EAP to the latest patched version that addresses CVE-2010-3862.
What versions of JBoss EAP are affected by REDHAT-BUG-660623?
REDHAT-BUG-660623 affects JBoss EAP versions that have not been updated with critical security patches prior to the release of the mentioned security update.
Is a workaround available for REDHAT-BUG-660623?
Currently, there are no known workarounds for REDHAT-BUG-660623 besides applying the necessary updates.
What should I do if I experience a Denial-of-Service due to REDHAT-BUG-660623?
If you experience a Denial-of-Service due to REDHAT-BUG-660623, it is recommended to immediately patch your system and monitor it for any unusual activity.