Most severe vulnerabilities for "redhat jboss-remoting"

Where

Sort:

Versions

5.0.14

5.0.20

redhat/undertowA flaw was found in Undertow as shipped in Jboss EAP before version 7.2.4. A memory leak in HttpOpen…

Risk 45

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in Undertow as shipped in Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service.

References:

https://issues.redhat.com/browse/JBEAP-16695

1 / 2

Source: Red Hat

First published (updated )

CVE-2019-19343

redhat/eap7-activemq-artemisA flaw was found in jboss-remoting. A malicious attacker could cause threads to hold up forever in t…

Risk 41

Severity

5.9

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in JBoss Remoting. When a malicious attacker could cause threads holding up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ack messages, or just tamper with jboss-remoting code, deleting the lines that send the ack message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.

1 / 3

Source: Red Hat

First published (updated )

CVE-2020-35510

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.