Lucene search

Veracode Vulnerability DatabaseVERACODE:17626

HistoryMay 02, 2019 - 5:50 a.m.

Memory Corruption

2019-05-0205:50:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

mod_cluster is vulnerable to memory corruption attacks. Buffer overflow in mod_manager when sending requests with long JVMRoute lead to a memory corruption vulnerability. This may crash the application which results in denial of service.

CPENameOperatorVersion
httpd22eq2.2.26__37.ep6.el7
httpd22eq2.2.26__38.ep6.el7
httpd22eq2.2.26__41.ep6.el7
httpd22eq2.2.26__42.ep6.el7
hornetq-nativeeq2.3.25__3.Final_redhat_1.ep6.el7
hornetq-nativeeq2.2.8__1.CR1.1.ep5.el6
hornetq-nativeeq2.2.21__1.Final.ep6.el6
hornetq-nativeeq2.3.20__2.Final_redhat_1.ep6.el7
hornetq-nativeeq2.3.5__1.Final_redhat_1.ep6.el6
hornetq-nativeeq2.3.20__2.Final_redhat_1.ep6.el6

Name	Operator	Version
httpd22	eq	2.2.26__37.ep6.el7
httpd22	eq	2.2.26__38.ep6.el7
httpd22	eq	2.2.26__41.ep6.el7
httpd22	eq	2.2.26__42.ep6.el7
hornetq-native	eq	2.3.25__3.Final_redhat_1.ep6.el7
hornetq-native	eq	2.2.8__1.CR1.1.ep5.el6
hornetq-native	eq	2.2.21__1.Final.ep6.el6
hornetq-native	eq	2.3.20__2.Final_redhat_1.ep6.el7
hornetq-native	eq	2.3.5__1.Final_redhat_1.ep6.el6
hornetq-native	eq	2.3.20__2.Final_redhat_1.ep6.el6

Rows per page:

1-10 of 1841

References

rhn.redhat.com/errata/RHSA-2016-2054.html

rhn.redhat.com/errata/RHSA-2016-2055.html

rhn.redhat.com/errata/RHSA-2016-2056.html

rhn.redhat.com/errata/RHSA-2016-2957.html

www.securityfocus.com/bid/93555

access.redhat.com/articles/2688611

access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html

access.redhat.com/errata/RHSA-2017:0193

access.redhat.com/errata/RHSA-2017:0194

access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4

access.redhat.com/security/updates/classification/#moderate

access.redhat.com/solutions/222023

bugzilla.redhat.com/show_bug.cgi?id=1341583

bugzilla.redhat.com/show_bug.cgi?id=1345989

bugzilla.redhat.com/show_bug.cgi?id=1345993

bugzilla.redhat.com/show_bug.cgi?id=1345997

rhn.redhat.com/errata/RHSA-2016-2054.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

Related for VERACODE:17626