RHSA-2024:5145
- Source
- https://access.redhat.com/errata/RHSA-2024:5145
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2024:5145.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2024:5145
- Related
- Published
- 2024-09-30T19:53:12Z
- Modified
- 2024-11-15T21:14:51Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2024:5145
- https://access.redhat.com/articles/7073034
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/
- https://bugzilla.redhat.com/show_bug.cgi?id=2268277
- https://bugzilla.redhat.com/show_bug.cgi?id=2272907
- https://bugzilla.redhat.com/show_bug.cgi?id=2274437
- https://bugzilla.redhat.com/show_bug.cgi?id=2276360
- https://bugzilla.redhat.com/show_bug.cgi?id=2292211
- https://bugzilla.redhat.com/show_bug.cgi?id=2293025
- https://bugzilla.redhat.com/show_bug.cgi?id=2293028
- https://issues.redhat.com/browse/JBEAP-26292
- https://issues.redhat.com/browse/JBEAP-26835
- https://issues.redhat.com/browse/JBEAP-27017
- https://issues.redhat.com/browse/JBEAP-27056
- https://issues.redhat.com/browse/JBEAP-27078
- https://issues.redhat.com/browse/JBEAP-27079
- https://issues.redhat.com/browse/JBEAP-27101
- https://issues.redhat.com/browse/JBEAP-27181
- https://issues.redhat.com/browse/JBEAP-27290
- https://issues.redhat.com/browse/JBEAP-27352
- https://issues.redhat.com/browse/JBEAP-27353
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5145.json
- https://access.redhat.com/security/cve/CVE-2024-3653
- https://www.cve.org/CVERecord?id=CVE-2024-3653
- https://nvd.nist.gov/vuln/detail/CVE-2024-3653
- https://access.redhat.com/security/cve/CVE-2024-5971
- https://www.cve.org/CVERecord?id=CVE-2024-5971
- https://nvd.nist.gov/vuln/detail/CVE-2024-5971
- https://access.redhat.com/security/cve/CVE-2024-27316
- https://www.cve.org/CVERecord?id=CVE-2024-27316
- https://nvd.nist.gov/vuln/detail/CVE-2024-27316
- https://httpd.apache.org/security/vulnerabilities_24.html
- https://nowotarski.info/http2-continuation-flood/
- https://www.kb.cert.org/vuls/id/421644
- https://access.redhat.com/security/cve/CVE-2024-29025
- https://www.cve.org/CVERecord?id=CVE-2024-29025
- https://nvd.nist.gov/vuln/detail/CVE-2024-29025
- https://gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3
- https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c
- https://github.com/netty/netty/security/advisories/GHSA-5jpm-x58v-624v
- https://security.snyk.io/vuln/SNYK-JAVA-IONETTY-6483812
- https://access.redhat.com/security/cve/CVE-2024-29857
- https://www.cve.org/CVERecord?id=CVE-2024-29857
- https://nvd.nist.gov/vuln/detail/CVE-2024-29857
- https://access.redhat.com/security/cve/CVE-2024-30171
- https://www.cve.org/CVERecord?id=CVE-2024-30171
- https://nvd.nist.gov/vuln/detail/CVE-2024-30171
- https://people.redhat.com/~hkario/marvin/
- https://access.redhat.com/security/cve/CVE-2024-30172
- https://www.cve.org/CVERecord?id=CVE-2024-30172
- https://nvd.nist.gov/vuln/detail/CVE-2024-30172
- https://www.bouncycastle.org/latest_releases.html
Affected packages
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-undertow
Package
- Name
- eap7-undertow
- Purl
- pkg:rpm/redhat/eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-bouncycastle
Package
- Name
- eap7-bouncycastle
- Purl
- pkg:rpm/redhat/eap7-bouncycastle
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-bouncycastle-mail
Package
- Name
- eap7-bouncycastle-mail
- Purl
- pkg:rpm/redhat/eap7-bouncycastle-mail
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-bouncycastle-pg
Package
- Name
- eap7-bouncycastle-pg
- Purl
- pkg:rpm/redhat/eap7-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-bouncycastle-pkix
Package
- Name
- eap7-bouncycastle-pkix
- Purl
- pkg:rpm/redhat/eap7-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-bouncycastle-prov
Package
- Name
- eap7-bouncycastle-prov
- Purl
- pkg:rpm/redhat/eap7-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-bouncycastle-util
Package
- Name
- eap7-bouncycastle-util
- Purl
- pkg:rpm/redhat/eap7-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-hal-console
Package
- Name
- eap7-hal-console
- Purl
- pkg:rpm/redhat/eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar
Package
- Name
- eap7-ironjacamar
- Purl
- pkg:rpm/redhat/eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-common-api
Package
- Name
- eap7-ironjacamar-common-api
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-common-impl
Package
- Name
- eap7-ironjacamar-common-impl
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-common-spi
Package
- Name
- eap7-ironjacamar-common-spi
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-core-api
Package
- Name
- eap7-ironjacamar-core-api
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-core-impl
Package
- Name
- eap7-ironjacamar-core-impl
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-deployers-common
Package
- Name
- eap7-ironjacamar-deployers-common
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-jdbc
Package
- Name
- eap7-ironjacamar-jdbc
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-ironjacamar-validator
Package
- Name
- eap7-ironjacamar-validator
- Purl
- pkg:rpm/redhat/eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-jandex
Package
- Name
- eap7-jandex
- Purl
- pkg:rpm/redhat/eap7-jandex
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-jboss-remoting
Package
- Name
- eap7-jboss-remoting
- Purl
- pkg:rpm/redhat/eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-jboss-server-migration
Package
- Name
- eap7-jboss-server-migration
- Purl
- pkg:rpm/redhat/eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-jboss-server-migration-cli
Package
- Name
- eap7-jboss-server-migration-cli
- Purl
- pkg:rpm/redhat/eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-jboss-server-migration-core
Package
- Name
- eap7-jboss-server-migration-core
- Purl
- pkg:rpm/redhat/eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-jboss-xnio-base
Package
- Name
- eap7-jboss-xnio-base
- Purl
- pkg:rpm/redhat/eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-log4j-jboss-logmanager
Package
- Name
- eap7-log4j-jboss-logmanager
- Purl
- pkg:rpm/redhat/eap7-log4j-jboss-logmanager
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty
Package
- Name
- eap7-netty
- Purl
- pkg:rpm/redhat/eap7-netty
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-buffer
Package
- Name
- eap7-netty-buffer
- Purl
- pkg:rpm/redhat/eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec
Package
- Name
- eap7-netty-codec
- Purl
- pkg:rpm/redhat/eap7-netty-codec
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-dns
Package
- Name
- eap7-netty-codec-dns
- Purl
- pkg:rpm/redhat/eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-haproxy
Package
- Name
- eap7-netty-codec-haproxy
- Purl
- pkg:rpm/redhat/eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-http
Package
- Name
- eap7-netty-codec-http
- Purl
- pkg:rpm/redhat/eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-http2
Package
- Name
- eap7-netty-codec-http2
- Purl
- pkg:rpm/redhat/eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-memcache
Package
- Name
- eap7-netty-codec-memcache
- Purl
- pkg:rpm/redhat/eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-mqtt
Package
- Name
- eap7-netty-codec-mqtt
- Purl
- pkg:rpm/redhat/eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-redis
Package
- Name
- eap7-netty-codec-redis
- Purl
- pkg:rpm/redhat/eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-smtp
Package
- Name
- eap7-netty-codec-smtp
- Purl
- pkg:rpm/redhat/eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-socks
Package
- Name
- eap7-netty-codec-socks
- Purl
- pkg:rpm/redhat/eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-stomp
Package
- Name
- eap7-netty-codec-stomp
- Purl
- pkg:rpm/redhat/eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-codec-xml
Package
- Name
- eap7-netty-codec-xml
- Purl
- pkg:rpm/redhat/eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-common
Package
- Name
- eap7-netty-common
- Purl
- pkg:rpm/redhat/eap7-netty-common
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-handler
Package
- Name
- eap7-netty-handler
- Purl
- pkg:rpm/redhat/eap7-netty-handler
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-handler-proxy
Package
- Name
- eap7-netty-handler-proxy
- Purl
- pkg:rpm/redhat/eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-resolver
Package
- Name
- eap7-netty-resolver
- Purl
- pkg:rpm/redhat/eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-resolver-dns
Package
- Name
- eap7-netty-resolver-dns
- Purl
- pkg:rpm/redhat/eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-resolver-dns-classes-macos
Package
- Name
- eap7-netty-resolver-dns-classes-macos
- Purl
- pkg:rpm/redhat/eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport
Package
- Name
- eap7-netty-transport
- Purl
- pkg:rpm/redhat/eap7-netty-transport
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-classes-epoll
Package
- Name
- eap7-netty-transport-classes-epoll
- Purl
- pkg:rpm/redhat/eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-classes-kqueue
Package
- Name
- eap7-netty-transport-classes-kqueue
- Purl
- pkg:rpm/redhat/eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-native-epoll
Package
- Name
- eap7-netty-transport-native-epoll
- Purl
- pkg:rpm/redhat/eap7-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-native-epoll-debuginfo
Package
- Name
- eap7-netty-transport-native-epoll-debuginfo
- Purl
- pkg:rpm/redhat/eap7-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-native-unix-common
Package
- Name
- eap7-netty-transport-native-unix-common
- Purl
- pkg:rpm/redhat/eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-rxtx
Package
- Name
- eap7-netty-transport-rxtx
- Purl
- pkg:rpm/redhat/eap7-netty-transport-rxtx
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-sctp
Package
- Name
- eap7-netty-transport-sctp
- Purl
- pkg:rpm/redhat/eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-transport-udt
Package
- Name
- eap7-netty-transport-udt
- Purl
- pkg:rpm/redhat/eap7-netty-transport-udt
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-netty-xnio-transport
Package
- Name
- eap7-netty-xnio-transport
- Purl
- pkg:rpm/redhat/eap7-netty-xnio-transport
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-wildfly
Package
- Name
- eap7-wildfly
- Purl
- pkg:rpm/redhat/eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-wildfly-java-jdk11
Package
- Name
- eap7-wildfly-java-jdk11
- Purl
- pkg:rpm/redhat/eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-wildfly-java-jdk17
Package
- Name
- eap7-wildfly-java-jdk17
- Purl
- pkg:rpm/redhat/eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-wildfly-java-jdk8
Package
- Name
- eap7-wildfly-java-jdk8
- Purl
- pkg:rpm/redhat/eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9 / eap7-wildfly-javadocs
Package
- Name
- eap7-wildfly-javadocs
- Purl
- pkg:rpm/redhat/eap7-wildfly-javadocs