Lucene search

RedHatRHSA-2024:2764

HistoryMay 08, 2024 - 2:15 p.m.

(RHSA-2024:2764) Important: Red Hat JBoss Enterprise Application Platform 8.0 security update

2024-05-0814:15:22

access.redhat.com

red hat jboss

enterprise application platform

security update

cve-2023-4639

cve-2024-1459

cve-2023-1973

undertow

directory traversal

memory exhaustion

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.5%

JSON

Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.

This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 8.0.

Security Fix(es):

undertow: Cookie Smuggling/Spoofing (CVE-2023-4639)
undertow: Directory traversal vulnerability (CVE-2024-1459)
undertow: Unrestricted request storage leads to memory exhaustion (CVE-2023-1973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9noarcheap8-undertow< 2.3.11-1.SP1_redhat_00001.1.el9eapeap8-undertow-2.3.11-1.SP1_redhat_00001.1.el9eap.noarch.rpm
RedHat8noarcheap8-undertow< 2.3.11-1.SP1_redhat_00001.1.el8eapeap8-undertow-2.3.11-1.SP1_redhat_00001.1.el8eap.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	noarch	eap8-undertow	< 2.3.11-1.SP1_redhat_00001.1.el9eap	eap8-undertow-2.3.11-1.SP1_redhat_00001.1.el9eap.noarch.rpm
RedHat	8	noarch	eap8-undertow	< 2.3.11-1.SP1_redhat_00001.1.el8eap	eap8-undertow-2.3.11-1.SP1_redhat_00001.1.el8eap.noarch.rpm