- Vulnerability/
- RHSA-2016:1334
RHSA-2016:1334: Critical: Red Hat JBoss Data Grid 6.6 security update
First published: Thu Jun 23 2016(Updated: )
Red Hat JBoss Data Grid is a distributed in-memory data grid, based on<br>Infinispan.<br>This asynchronous patch is a security update for JGroups package in Red Hat JBoss Data Grid 6.6. More information about this vulnerability is available at: <a href="https://access.redhat.com/articles/2360521" target="_blank">https://access.redhat.com/articles/2360521</a> Security Fix(es):<br><li> It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. (CVE-2016-2141)</li> The CVE-2016-2141 issue was discovered by Dennis Reed (Red Hat).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat JBoss Data Grid |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1313589
- https://access.redhat.com/security/updates/classification/#critical
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.grid&downloadType=securityPatches&version=6.6.0
- https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Data_Grid/
- https://access.redhat.com/articles/2360521
- https://access.redhat.com/errata/RHSA-2016:1334 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2016:1334?
RHSA-2016:1334 is classified as a critical security update.
How do I fix RHSA-2016:1334?
To fix RHSA-2016:1334, you should update your Red Hat JBoss Data Grid to the latest version using the security patches provided.
What does RHSA-2016:1334 address?
RHSA-2016:1334 addresses a vulnerability in the JGroups package of Red Hat JBoss Data Grid.
Which products are affected by RHSA-2016:1334?
RHSA-2016:1334 affects Red Hat JBoss Data Grid version 6.6.
Is RHSA-2016:1334 easy to exploit?
Yes, the vulnerability addressed in RHSA-2016:1334 is relatively easy to exploit, making it crucial to apply the update promptly.
- agent/severity
- agent/references
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2016:1334
- agent/source
- agent/description
- agent/title
- agent/remedy
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat jboss data grid