What is RHSA-2017:0272?

RHSA-2017:0272 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss Data Virtualization security and bug fix update

Which CVE IDs does RHSA-2017:0272 cover?

RHSA-2017:0272 covers the following CVE IDs: CVE-2016-2175, CVE-2016-4434, CVE-2016-6814. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2017:0272?

RHSA-2017:0272 has a CVSS v3 base score of 8.3, published by Red Hat Product Security.

Which products are affected by RHSA-2017:0272?

RHSA-2017:0272 affects 1 product, including: Red Hat JBoss Data Virtualization 6.3.

RHSA-2017:0272MediumCVSS 8.3

Red Hat Security Advisory: Red Hat JBoss Data Virtualization security and bug fix update

Vendor

Red Hat Product Security

Published

February 14, 2017

Last Modified

November 5, 2026

🔗 CVE IDs covered (3)

CVE-2016-2175 →CVE-2016-4434 →CVE-2016-6814 →

📋 Description

CVE-2016-2175 — pdfbox: XML External Entity vulnerability CVE-2016-4434 — tika: XML External Entity vulnerability CVE-2016-6814 — Groovy: Remote code execution via deserialization

🎯 Affected products1

Red Hat JBoss Data Virtualization 6.3

✅ Remediation

Before applying the update, back up your existing Red Hat JBoss Data Virtualization installation (including its databases, applications, configuration files, and so on). Note that it is recommended to halt the Red Hat JBoss Data Virtualization server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the Red Hat JBoss Data Virtualization server by starting the JBoss Application Server process. The References section of this erratum contains a download link (you must log in to download the update).

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (7)