Linux Distros Unpatched Vulnerability : CVE-2016-6346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors. CVE-2016-6346 Note that Nessus relies on t...

org.jboss.resteasy:abdera-atom-provider (1.2.rc1), org.jboss.resteasy:async-http-servlet-3.0 (1.2.rc1) +7 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (1.2.rc1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.2.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 1.2.rc1 - org.jboss.resteasy:async-http-servlet-3.0...

org.jboss.resteasy:abdera-atom-provider (2.0-beta-1), org.jboss.resteasy:async-http-servlet-3.0 (2.0-beta-1) +9 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0-beta-1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 2.0-beta-1 -...

org.jboss.resteasy:abdera-atom-provider (1.2.ga), org.jboss.resteasy:async-http-servlet-3.0 (1.2.ga) +7 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (1.2.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 1.2.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 1.2.ga - org.jboss.resteasy:async-http-servlet-3.0...

com.redhat.rhevm.api:rhevm-api (0.9-milestone2), com.redhat.rhevm.api:rhevm-api-cli-actions (0.9-milestone2) +29 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0-rc1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.rhevm.api:rhevm-api 0.9-milestone2 - com.redhat.rhevm.api:rhevm-api-cli-actions...

com.redhat.rhevm.api:rhevm-api (>=0.9-milestone2.1, <=0.9-milestone8.2), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone2.1, <=0.9-milestone6.6) +34 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0.1.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.rhevm.api:rhevm-api =0.9-milestone2.1, =0.9-milestone2.1, =0.9-milestone2.1,...

com.redhat.rhevm.api:rhevm-api (1.0-rc1.3), com.redhat.rhevm.api:rhevm-api-common-jaxrs (1.0-rc1.3) +80 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.2.0.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.rhevm.api:rhevm-api 1.0-rc1.3 - com.redhat.rhevm.api:rhevm-api-common-jaxrs...

org.codehaus.enunciate:enunciate-jboss (>=1.22-rc1, <=1.25), org.codehaus.enunciate:enunciate-jboss-rt (>=1.22-rc1, <=1.25) +17 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.0.0.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.codehaus.enunciate:enunciate-jboss =1.22-rc1, =1.22-rc1, =1.22-rc1, =1.25 -...

com.redhat.lightblue.client:lightblue-client-integration-test (>=1.4.0, <=5.4.0), com.thoughtworks.inproctester:inproctester-resteasy (>=1.0.13, <=1.0.15) +37 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.3.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.redhat.lightblue.client:lightblue-client-integration-test =1.4.0, =1.0.13, =1.0.13,...

com.arcbees:guicy-resteasy (>=1.0, <=1.2), com.codeablereason.restcompress.provider:rest-compress-lib (0.6) +68 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.5.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.arcbees:guicy-resteasy =1.0, =1.0, =1.0.7, =1.3.1, =1.2.3, =1.1.0, =3.8.0, =3.16.0...

com.genexus:gxexternalproviders (>=2.6.2, <=2.7.30), com.huawei.openstack4j.connectors:openstack4j-resteasy (>=1.0.5, <=1.0.26) +197 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.7.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.genexus:gxexternalproviders =2.6.2, =1.0.5, =1.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0,...

com.woorea:resteasy-connector (>=3.0.0, <=3.2.7), org.chtijbug.drools:drools-framework-rest-guvnor (>=drools-framework-parent-1.5.3, <=1.5.2) +28 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.2.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.woorea:resteasy-connector =3.0.0, =drools-framework-parent-1.5.3,...

biz.paluch.visualizr:visualizr (1.0), com.iorga:iraj (>=1.1.0, <=1.1.1) +128 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.6.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - biz.paluch.visualizr:visualizr 1.0 - com.iorga:iraj =1.1.0, =1.3.0, =1.3.0, =1.3.0,...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +1245 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.0.0, =1.1.9, =1.1.10 and more Source cves: CVE-2016-6346 Source advisory: OSV:GHSA-WXVR-VQFP-9CQW...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +1245 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.0.0, =1.1.9, =1.1.10 and more Source cves: CVE-2016-6346 Source advisory: GHSA-WXVR-VQFP-9CQW...

org.jboss.resteasy:abdera-atom-provider (2.1-beta-1), org.jboss.resteasy:async-http-servlet-3.0 (2.1-beta-1) +13 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.1-beta-1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 2.1-beta-1 -...

org.jboss.resteasy:abdera-atom-provider (2.2-rc-1), org.jboss.resteasy:async-http-servlet-3.0 (2.2-rc-1) +15 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.2-rc-1)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:abdera-atom-provider 2.2-rc-1 - org.jboss.resteasy:async-http-servlet-3...

com.devonfw.cobigen:tsplugin (2.2.0), net.sf.ahtutils:ahtutils-jsf (>=0.2.4, <=0.2.5) +30 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.2.1.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - com.devonfw.cobigen:tsplugin 2.2.0 - net.sf.ahtutils:ahtutils-jsf =0.2.4, =1.26-rc1,...

Important: Red Hat Security Advisory: eap7-jboss-ec2-eap security update

An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact o...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.0.9 security update on RHEL 7

An update is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...