- Vulnerability/
- RHSA-2020:3383
RHSA-2020:3383: Important: Red Hat JBoss Enterprise Application Platform 6.4 security update
First published: Mon Aug 10 2020(Updated: )
Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.<br>This asynchronous patch is an update for JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, 6, and 7. All users of Red Hat JBoss Enterprise Application Platform 6.4 are advised to upgrade to this updated package.<br>Security Fix(es):<br><li> jbossweb: tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS (CVE-2020-13935)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/jbossweb | <7.5.31-2.Final_redhat_2.1.ep6.el7 | 7.5.31-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossweb | <7.5.31-2.Final_redhat_2.1.ep6.el7 | 7.5.31-2.Final_redhat_2.1.ep6.el7 |
| redhat/jbossweb | <7.5.31-2.Final_redhat_2.1.ep6.el6 | 7.5.31-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossweb | <7.5.31-2.Final_redhat_2.1.ep6.el6 | 7.5.31-2.Final_redhat_2.1.ep6.el6 |
| redhat/jbossweb | <7.5.31-2.Final_redhat_2.1.ep6.el5 | 7.5.31-2.Final_redhat_2.1.ep6.el5 |
| redhat/jbossweb | <7.5.31-2.Final_redhat_2.1.ep6.el5 | 7.5.31-2.Final_redhat_2.1.ep6.el5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2020:3383?
RHSA-2020:3383 has a moderate severity rating.
How do I fix RHSA-2020:3383?
To fix RHSA-2020:3383, users should upgrade to jbossweb version 7.5.31-2.Final_redhat_2.1.ep6.el5, el6, or el7 depending on their system.
What vulnerabilities are addressed by RHSA-2020:3383?
RHSA-2020:3383 addresses multiple security vulnerabilities in JBoss Enterprise Application Platform.
Which versions of JBoss are affected by RHSA-2020:3383?
RHSA-2020:3383 affects JBoss Enterprise Application Platform versions prior to 7.5.31-2.Final_redhat_2.1.
Is RHSA-2020:3383 applicable to Red Hat Enterprise Linux 8?
No, RHSA-2020:3383 is not applicable to Red Hat Enterprise Linux 8, it is for versions 5, 6, and 7.
- agent/severity
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/title
- agent/remedy
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2020:3383
- agent/software-canonical-lookup
- agent/references
- agent/tags
- agent/event
- agent/source
- package-manager/redhat