RHEA-2015:1770Medium

Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.1 enhancement update

Published
September 10, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (3)

CVE-2014-0230 →CVE-2014-8111 →CVE-2015-0288 →

📋 Description

CVE-2014-0230 — tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-8111 — mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing CVE-2015-0288 — openssl: X509_to_X509_REQ NULL pointer dereference

🎯 Affected products37

  • Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_bmx-0:0.9.5-5.GA.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_bmx-0:0.9.5-5.GA.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_bmx-debuginfo-0:0.9.5-5.GA.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-0:1.3.1-8.Final_redhat_3.1.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-0:1.3.1-8.Final_redhat_3.1.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-tomcat7-0:1.3.1-8.Final_redhat_3.1.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-tomcat8-0:1.3.1-8.Final_redhat_3.1.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_jk-0:1.2.40-8.redhat_1.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_jk-ap24-0:1.2.40-8.redhat_1.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_jk-debuginfo-0:1.2.40-8.redhat_1.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_jk-manual-0:1.2.40-8.redhat_1.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_security-jws3-0:2.8.0-6.GA.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_security-jws3-0:2.8.0-6.GA.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_security-jws3-debuginfo-0:2.8.0-6.GA.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-0:7.0.59-26_patch_00.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-admin-webapps-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-docs-webapp-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-el-2.2-api-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-javadoc-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-jsp-2.2-api-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-lib-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-log4j-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-servlet-3.0-api-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-webapps-0:7.0.59-26_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat8-0:8.0.18-25_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat8-0:8.0.18-25_patch_00.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat8-admin-webapps-0:8.0.18-25_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat8-docs-webapp-0:8.0.18-25_patch_00.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • +7 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)