RedHatRHSA-2014:1728(RHSA-2014:1728) Moderate: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.07 Low
EPSS
Percentile
92.9%
Red Hat JBoss Enterprise Web Platform is a platform for Java applications,
which integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam.
It was discovered that the Apache Santuario XML Security for Java project
allowed Document Type Definitions (DTDs) to be processed when applying
Transforms even when secure validation was enabled. A remote attacker could
use this flaw to exhaust all available memory on the system, causing a
denial of service. (CVE-2013-4517)
All users of Red Hat JBoss Enterprise Web Platform 5.2.0 on Red Hat
Enterprise Linux 4, 5, and 6 are advised to upgrade to these updated
packages. The JBoss server process must be restarted for the update to take
effect.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | src | xml-security | < 1.5.6-3.el6 | xml-security-1.5.6-3.el6.src.rpm |
| RedHat | 6 | noarch | xml-security | < 1.5.6-3.el6 | xml-security-1.5.6-3.el6.noarch.rpm |
| RedHat | 5 | noarch | xml-security | < 1.5.6-3.ep5.el5 | xml-security-1.5.6-3.ep5.el5.noarch.rpm |
| RedHat | 5 | src | xml-security | < 1.5.6-3.ep5.el5 | xml-security-1.5.6-3.ep5.el5.src.rpm |
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.07 Low
EPSS
Percentile
92.9%