RHSA-2018:0270
- Source
- https://access.redhat.com/errata/RHSA-2018:0270
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2018:0270.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2018:0270
- Related
- Published
- 2024-09-13T16:50:16Z
- Modified
- 2024-10-20T16:51:04Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.19 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2018:0270
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/
- https://bugzilla.redhat.com/show_bug.cgi?id=1494283
- https://bugzilla.redhat.com/show_bug.cgi?id=1498378
- https://bugzilla.redhat.com/show_bug.cgi?id=1519258
- https://bugzilla.redhat.com/show_bug.cgi?id=1530457
- https://bugzilla.redhat.com/show_bug.cgi?id=1533996
- https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0270.json
- https://access.redhat.com/security/cve/CVE-2017-12174
- https://www.cve.org/CVERecord?id=CVE-2017-12174
- https://nvd.nist.gov/vuln/detail/CVE-2017-12174
- https://access.redhat.com/security/cve/CVE-2017-12617
- https://www.cve.org/CVERecord?id=CVE-2017-12617
- https://nvd.nist.gov/vuln/detail/CVE-2017-12617
- https://tomcat.apache.org/security-7.html
- https://tomcat.apache.org/security-8.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://access.redhat.com/security/cve/CVE-2018-1041
- https://www.cve.org/CVERecord?id=CVE-2018-1041
- https://nvd.nist.gov/vuln/detail/CVE-2018-1041
Affected packages
Red Hat:jboss_enterprise_application_platform:6::el6 / hornetq
Package
- Name
- hornetq
- Purl
- pkg:rpm/redhat/hornetq
Red Hat:jboss_enterprise_application_platform:6::el6 / infinispan
Package
- Name
- infinispan
- Purl
- pkg:rpm/redhat/infinispan
Red Hat:jboss_enterprise_application_platform:6::el6 / infinispan-cachestore-jdbc
Package
- Name
- infinispan-cachestore-jdbc
- Purl
- pkg:rpm/redhat/infinispan-cachestore-jdbc
Red Hat:jboss_enterprise_application_platform:6::el6 / infinispan-cachestore-remote
Package
- Name
- infinispan-cachestore-remote
- Purl
- pkg:rpm/redhat/infinispan-cachestore-remote
Red Hat:jboss_enterprise_application_platform:6::el6 / infinispan-client-hotrod
Package
- Name
- infinispan-client-hotrod
- Purl
- pkg:rpm/redhat/infinispan-client-hotrod
Red Hat:jboss_enterprise_application_platform:6::el6 / infinispan-core
Package
- Name
- infinispan-core
- Purl
- pkg:rpm/redhat/infinispan-core
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-common-api-eap6
Package
- Name
- ironjacamar-common-api-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-common-api-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-common-impl-eap6
Package
- Name
- ironjacamar-common-impl-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-common-impl-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-common-spi-eap6
Package
- Name
- ironjacamar-common-spi-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-common-spi-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-core-api-eap6
Package
- Name
- ironjacamar-core-api-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-core-api-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-core-impl-eap6
Package
- Name
- ironjacamar-core-impl-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-core-impl-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-deployers-common-eap6
Package
- Name
- ironjacamar-deployers-common-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-deployers-common-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-eap6
Package
- Name
- ironjacamar-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-jdbc-eap6
Package
- Name
- ironjacamar-jdbc-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-jdbc-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-spec-api-eap6
Package
- Name
- ironjacamar-spec-api-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-spec-api-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / ironjacamar-validator-eap6
Package
- Name
- ironjacamar-validator-eap6
- Purl
- pkg:rpm/redhat/ironjacamar-validator-eap6
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-appclient
Package
- Name
- jboss-as-appclient
- Purl
- pkg:rpm/redhat/jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-cli
Package
- Name
- jboss-as-cli
- Purl
- pkg:rpm/redhat/jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-client-all
Package
- Name
- jboss-as-client-all
- Purl
- pkg:rpm/redhat/jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-clustering
Package
- Name
- jboss-as-clustering
- Purl
- pkg:rpm/redhat/jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-cmp
Package
- Name
- jboss-as-cmp
- Purl
- pkg:rpm/redhat/jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-configadmin
Package
- Name
- jboss-as-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-connector
Package
- Name
- jboss-as-connector
- Purl
- pkg:rpm/redhat/jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-controller
Package
- Name
- jboss-as-controller
- Purl
- pkg:rpm/redhat/jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-controller-client
Package
- Name
- jboss-as-controller-client
- Purl
- pkg:rpm/redhat/jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-core-security
Package
- Name
- jboss-as-core-security
- Purl
- pkg:rpm/redhat/jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-deployment-repository
Package
- Name
- jboss-as-deployment-repository
- Purl
- pkg:rpm/redhat/jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-deployment-scanner
Package
- Name
- jboss-as-deployment-scanner
- Purl
- pkg:rpm/redhat/jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-domain-http
Package
- Name
- jboss-as-domain-http
- Purl
- pkg:rpm/redhat/jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-domain-management
Package
- Name
- jboss-as-domain-management
- Purl
- pkg:rpm/redhat/jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-ee
Package
- Name
- jboss-as-ee
- Purl
- pkg:rpm/redhat/jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-ee-deployment
Package
- Name
- jboss-as-ee-deployment
- Purl
- pkg:rpm/redhat/jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-ejb3
Package
- Name
- jboss-as-ejb3
- Purl
- pkg:rpm/redhat/jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-embedded
Package
- Name
- jboss-as-embedded
- Purl
- pkg:rpm/redhat/jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-host-controller
Package
- Name
- jboss-as-host-controller
- Purl
- pkg:rpm/redhat/jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jacorb
Package
- Name
- jboss-as-jacorb
- Purl
- pkg:rpm/redhat/jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jaxr
Package
- Name
- jboss-as-jaxr
- Purl
- pkg:rpm/redhat/jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jaxrs
Package
- Name
- jboss-as-jaxrs
- Purl
- pkg:rpm/redhat/jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jdr
Package
- Name
- jboss-as-jdr
- Purl
- pkg:rpm/redhat/jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jmx
Package
- Name
- jboss-as-jmx
- Purl
- pkg:rpm/redhat/jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jpa
Package
- Name
- jboss-as-jpa
- Purl
- pkg:rpm/redhat/jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jsf
Package
- Name
- jboss-as-jsf
- Purl
- pkg:rpm/redhat/jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-jsr77
Package
- Name
- jboss-as-jsr77
- Purl
- pkg:rpm/redhat/jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-logging
Package
- Name
- jboss-as-logging
- Purl
- pkg:rpm/redhat/jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-mail
Package
- Name
- jboss-as-mail
- Purl
- pkg:rpm/redhat/jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-management-client-content
Package
- Name
- jboss-as-management-client-content
- Purl
- pkg:rpm/redhat/jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-messaging
Package
- Name
- jboss-as-messaging
- Purl
- pkg:rpm/redhat/jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-modcluster
Package
- Name
- jboss-as-modcluster
- Purl
- pkg:rpm/redhat/jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-naming
Package
- Name
- jboss-as-naming
- Purl
- pkg:rpm/redhat/jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-network
Package
- Name
- jboss-as-network
- Purl
- pkg:rpm/redhat/jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-osgi
Package
- Name
- jboss-as-osgi
- Purl
- pkg:rpm/redhat/jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-osgi-configadmin
Package
- Name
- jboss-as-osgi-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-osgi-service
Package
- Name
- jboss-as-osgi-service
- Purl
- pkg:rpm/redhat/jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-picketlink
Package
- Name
- jboss-as-picketlink
- Purl
- pkg:rpm/redhat/jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-platform-mbean
Package
- Name
- jboss-as-platform-mbean
- Purl
- pkg:rpm/redhat/jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-pojo
Package
- Name
- jboss-as-pojo
- Purl
- pkg:rpm/redhat/jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-process-controller
Package
- Name
- jboss-as-process-controller
- Purl
- pkg:rpm/redhat/jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-protocol
Package
- Name
- jboss-as-protocol
- Purl
- pkg:rpm/redhat/jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-remoting
Package
- Name
- jboss-as-remoting
- Purl
- pkg:rpm/redhat/jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-sar
Package
- Name
- jboss-as-sar
- Purl
- pkg:rpm/redhat/jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-security
Package
- Name
- jboss-as-security
- Purl
- pkg:rpm/redhat/jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-server
Package
- Name
- jboss-as-server
- Purl
- pkg:rpm/redhat/jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-system-jmx
Package
- Name
- jboss-as-system-jmx
- Purl
- pkg:rpm/redhat/jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-threads
Package
- Name
- jboss-as-threads
- Purl
- pkg:rpm/redhat/jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-transactions
Package
- Name
- jboss-as-transactions
- Purl
- pkg:rpm/redhat/jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-version
Package
- Name
- jboss-as-version
- Purl
- pkg:rpm/redhat/jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-web
Package
- Name
- jboss-as-web
- Purl
- pkg:rpm/redhat/jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-webservices
Package
- Name
- jboss-as-webservices
- Purl
- pkg:rpm/redhat/jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-weld
Package
- Name
- jboss-as-weld
- Purl
- pkg:rpm/redhat/jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-as-xts
Package
- Name
- jboss-as-xts
- Purl
- pkg:rpm/redhat/jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-ejb-client
Package
- Name
- jboss-ejb-client
- Purl
- pkg:rpm/redhat/jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:6::el6 / jboss-remoting3
Package
- Name
- jboss-remoting3
- Purl
- pkg:rpm/redhat/jboss-remoting3
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-appclient
Package
- Name
- jbossas-appclient
- Purl
- pkg:rpm/redhat/jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-bundles
Package
- Name
- jbossas-bundles
- Purl
- pkg:rpm/redhat/jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-core
Package
- Name
- jbossas-core
- Purl
- pkg:rpm/redhat/jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-domain
Package
- Name
- jbossas-domain
- Purl
- pkg:rpm/redhat/jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-javadocs
Package
- Name
- jbossas-javadocs
- Purl
- pkg:rpm/redhat/jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-modules-eap
Package
- Name
- jbossas-modules-eap
- Purl
- pkg:rpm/redhat/jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-product-eap
Package
- Name
- jbossas-product-eap
- Purl
- pkg:rpm/redhat/jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-standalone
Package
- Name
- jbossas-standalone
- Purl
- pkg:rpm/redhat/jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossas-welcome-content-eap
Package
- Name
- jbossas-welcome-content-eap
- Purl
- pkg:rpm/redhat/jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossweb
Package
- Name
- jbossweb
- Purl
- pkg:rpm/redhat/jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6 / jbossws-cxf
Package
- Name
- jbossws-cxf
- Purl
- pkg:rpm/redhat/jbossws-cxf
Red Hat:jboss_enterprise_application_platform:6::el6 / picketlink-bindings
Package
- Name
- picketlink-bindings
- Purl
- pkg:rpm/redhat/picketlink-bindings