RHSA-2018:1248HighCVSS 8.6

Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6

Published
April 25, 2018
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2018-1047 →CVE-2018-1067 →CVE-2018-8088 →

📋 Description

CVE-2018-1047 — undertow: Path traversal in ServletResourceManager class CVE-2018-1067 — undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) CVE-2018-8088 — slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

🎯 Affected products110

  • Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-0:1.5.5.010-1.redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-cli-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-commons-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-core-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-dto-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-hornetq-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-hqclient-protocol-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-jdbc-store-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-jms-client-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-jms-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-journal-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-native-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-ra-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-selector-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-server-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-activemq-artemis-service-extensions-0:1.5.5.010-1.redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-0:5.1.13-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-core-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-entitymanager-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-envers-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-infinispan-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-hibernate-java8-0:5.1.13-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-infinispan-0:8.2.10-1.Final_redhat_1.1.ep7.el6.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-infinispan-cachestore-jdbc-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-infinispan-cachestore-remote-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • eap7-infinispan-client-hotrod-0:8.2.10-1.Final_redhat_1.1.ep7.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server
  • +80 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (8)