What is RHSA-2015:2661?

RHSA-2015:2661 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.2 security update

Which CVE IDs does RHSA-2015:2661 cover?

RHSA-2015:2661 covers the following CVE IDs: CVE-2013-5704, CVE-2014-0230, CVE-2014-3581, CVE-2015-3183, CVE-2015-5174. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2015:2661?

RHSA-2015:2661 has a CVSS v3 base score of 4.3, published by Red Hat Product Security.

Which products are affected by RHSA-2015:2661?

RHSA-2015:2661 affects 1 product, including: Red Hat JBoss Web Server 3.0.

RHSA-2015:2661MediumCVSS 4.3

Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.2 security update

Vendor

Red Hat Product Security

Published

December 16, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (5)

CVE-2013-5704 →CVE-2014-0230 →CVE-2014-3581 →CVE-2015-3183 →CVE-2015-5174 →

📋 Description

CVE-2013-5704 — httpd: bypass of mod_headers rules via chunked requests CVE-2014-0230 — tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-3581 — httpd: NULL pointer dereference in mod_cache if Content-Type has empty value CVE-2015-3183 — httpd: HTTP request smuggling attack against chunked request parser CVE-2015-5174 — tomcat: URL Normalization issue

🎯 Affected products1

Red Hat JBoss Web Server 3.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied and back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (11)