RHSA-2015:2659MediumCVSS 4.3

Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.2 security update

Published
December 16, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (5)

CVE-2013-5704 →CVE-2014-0230 →CVE-2014-3581 →CVE-2015-3183 →CVE-2015-5174 →

📋 Description

CVE-2013-5704 — httpd: bypass of mod_headers rules via chunked requests CVE-2014-0230 — tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-3581 — httpd: NULL pointer dereference in mod_cache if Content-Type has empty value CVE-2015-3183 — httpd: HTTP request smuggling attack against chunked request parser CVE-2015-5174 — tomcat: URL Normalization issue

🎯 Affected products56

  • Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-collections-eap6-0:3.2.1-18.redhat_7.1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-collections-eap6-0:3.2.1-18.redhat_7.1.ep6.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-collections-tomcat-eap6-0:3.2.1-18.redhat_7.1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-0:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-0:2.4.6-59.ep7.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-0:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-debuginfo-0:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-debuginfo-0:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-devel-0:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-devel-0:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-manual-0:2.4.6-59.ep7.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-tools-0:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • httpd24-tools-0:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_bmx-0:0.9.5-7.GA.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_bmx-0:0.9.5-7.GA.ep7.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_bmx-0:0.9.5-7.GA.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_bmx-debuginfo-0:0.9.5-7.GA.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_bmx-debuginfo-0:0.9.5-7.GA.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_cluster-native-debuginfo-0:1.3.1-6.Final_redhat_2.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_cluster-native-debuginfo-0:1.3.1-6.Final_redhat_2.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_ldap24-0:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_ldap24-0:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_proxy24_html-1:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_proxy24_html-1:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_session24-0:2.4.6-59.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • mod_session24-0:2.4.6-59.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • +26 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (10)