RHSA-2014:1021High

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 update

Published
August 6, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2014-0118 →CVE-2014-0193 →CVE-2014-0221 →CVE-2014-0226 →CVE-2014-0227 →CVE-2014-0231 →CVE-2014-3464 →CVE-2014-3472 →

📋 Description

CVE-2014-0118 — httpd: mod_deflate denial of service CVE-2014-0193 — netty: DoS via memory exhaustion during data aggregation CVE-2014-0221 — openssl: DoS when sending invalid DTLS handshake CVE-2014-0226 — httpd: mod_status heap-based buffer overflow CVE-2014-0227 — Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter CVE-2014-0231 — httpd: mod_cgid denial of service CVE-2014-3464 — WS: Incomplete fix for CVE-2013-2133 CVE-2014-3472 — Security: Invalid EJB caller role check implementation

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 6.3

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

🔗 References (11)