RHSA-2015:2660MediumCVSS 4.3

Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.2 security update

Published
December 16, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (5)

CVE-2013-5704 →CVE-2014-0230 →CVE-2014-3581 →CVE-2015-3183 →CVE-2015-5174 →

📋 Description

CVE-2013-5704 — httpd: bypass of mod_headers rules via chunked requests CVE-2014-0230 — tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-3581 — httpd: NULL pointer dereference in mod_cache if Content-Type has empty value CVE-2015-3183 — httpd: HTTP request smuggling attack against chunked request parser CVE-2015-5174 — tomcat: URL Normalization issue

🎯 Affected products44

  • Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-collections-eap6-0:3.2.1-18.redhat_7.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-collections-eap6-0:3.2.1-18.redhat_7.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-collections-tomcat-eap6-0:3.2.1-18.redhat_7.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • httpd24-0:2.4.6-59.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • httpd24-0:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • httpd24-debuginfo-0:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • httpd24-devel-0:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • httpd24-manual-0:2.4.6-59.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • httpd24-tools-0:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_bmx-0:0.9.5-7.GA.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_bmx-0:0.9.5-7.GA.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_bmx-debuginfo-0:0.9.5-7.GA.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-native-0:1.3.1-6.Final_redhat_2.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_cluster-native-debuginfo-0:1.3.1-6.Final_redhat_2.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_ldap24-0:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_proxy24_html-1:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_session24-0:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • mod_ssl24-1:2.4.6-59.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat-vault-0:1.0.8-4.Final_redhat_4.1.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat-vault-0:1.0.8-4.Final_redhat_4.1.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-0:7.0.59-42_patch_01.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-admin-webapps-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-docs-webapp-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-el-2.2-api-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-javadoc-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-jsp-2.2-api-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • tomcat7-lib-0:7.0.59-42_patch_01.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • +14 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (10)