RHSA-2012:0075High

Red Hat Security Advisory: jbossweb security update

Published
January 31, 2012
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2011-1184 →CVE-2011-2526 →CVE-2011-4610 →CVE-2011-4858 →CVE-2011-5062 →CVE-2011-5063 →CVE-2011-5064 →CVE-2012-0022 →

📋 Description

CVE-2011-1184 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-2526 — tomcat: security manager restrictions bypass CVE-2011-4610 — JBoss Web remote denial of service when surrogate pair character is placed at buffer boundary CVE-2011-4858 — tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) CVE-2011-5062 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-5063 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-5064 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2012-0022 — tomcat: large number of parameters DoS

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 5.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). The JBoss server process must be restarted for this update to take effect.

🔗 References (9)