RHSA-2017:3239HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update

Published
November 16, 2017
Last Modified
June 3, 2026

🔗 CVE IDs covered (6)

CVE-2009-3560 →CVE-2009-3720 →CVE-2012-0876 →CVE-2016-2183 →CVE-2017-9788 →CVE-2017-9798 →

📋 Description

CVE-2009-3560 — expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences CVE-2009-3720 — expat: buffer over-read and crash on XML with malformed UTF-8 sequences CVE-2012-0876 — expat: hash table collisions CPU usage DoS CVE-2016-2183 — SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) CVE-2017-9788 — httpd: Uninitialized memory reflection in mod_auth_digest CVE-2017-9798 — httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)

🔗 References (12)