(RHSA-2024:4390) Moderate: Red Hat JBoss Enterprise Application Platform 8.0 security update

2024-07-0821:26:13

access.redhat.com

red hat

jboss

security update

java

wildfly

http-2

cve-2024-27316

cvss score

acknowledgements

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

JSON

Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.

This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 8.0.

Security Fix(es):

HTTP-2: httpd: CONTINUATION frames DoS (CVE-2024-27316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarcheap8-jboss-remoting< 5.0.29-1.Final_redhat_00001.1.el8eapeap8-jboss-remoting-5.0.29-1.Final_redhat_00001.1.el8eap.noarch.rpm
RedHat8noarcheap8-wildfly-modules< 8.0.2-5.GA_redhat_00012.1.el8eapeap8-wildfly-modules-8.0.2-5.GA_redhat_00012.1.el8eap.noarch.rpm
RedHat9noarcheap8-hibernate-envers< 6.2.26-1.Final_redhat_00001.1.el9eapeap8-hibernate-envers-6.2.26-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat9noarcheap8-jboss-xnio-base< 3.8.16-1.Final_redhat_00001.1.el9eapeap8-jboss-xnio-base-3.8.16-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat9noarcheap8-wildfly-java-jdk11< 8.0.2-5.GA_redhat_00012.1.el9eapeap8-wildfly-java-jdk11-8.0.2-5.GA_redhat_00012.1.el9eap.noarch.rpm
RedHat9noarcheap8-jboss-remoting< 5.0.29-1.Final_redhat_00001.1.el9eapeap8-jboss-remoting-5.0.29-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat9noarcheap8-jose4j< 0.9.6-1.redhat_00001.1.el9eapeap8-jose4j-0.9.6-1.redhat_00001.1.el9eap.noarch.rpm
RedHat9noarcheap8-wildfly-modules< 8.0.2-5.GA_redhat_00012.1.el9eapeap8-wildfly-modules-8.0.2-5.GA_redhat_00012.1.el9eap.noarch.rpm
RedHat8noarcheap8-wildfly-java-jdk17< 8.0.2-5.GA_redhat_00012.1.el8eapeap8-wildfly-java-jdk17-8.0.2-5.GA_redhat_00012.1.el8eap.noarch.rpm
RedHat9noarcheap8-hibernate-core< 6.2.26-1.Final_redhat_00001.1.el9eapeap8-hibernate-core-6.2.26-1.Final_redhat_00001.1.el9eap.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	noarch	eap8-jboss-remoting	< 5.0.29-1.Final_redhat_00001.1.el8eap	eap8-jboss-remoting-5.0.29-1.Final_redhat_00001.1.el8eap.noarch.rpm
RedHat	8	noarch	eap8-wildfly-modules	< 8.0.2-5.GA_redhat_00012.1.el8eap	eap8-wildfly-modules-8.0.2-5.GA_redhat_00012.1.el8eap.noarch.rpm
RedHat	9	noarch	eap8-hibernate-envers	< 6.2.26-1.Final_redhat_00001.1.el9eap	eap8-hibernate-envers-6.2.26-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat	9	noarch	eap8-jboss-xnio-base	< 3.8.16-1.Final_redhat_00001.1.el9eap	eap8-jboss-xnio-base-3.8.16-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat	9	noarch	eap8-wildfly-java-jdk11	< 8.0.2-5.GA_redhat_00012.1.el9eap	eap8-wildfly-java-jdk11-8.0.2-5.GA_redhat_00012.1.el9eap.noarch.rpm
RedHat	9	noarch	eap8-jboss-remoting	< 5.0.29-1.Final_redhat_00001.1.el9eap	eap8-jboss-remoting-5.0.29-1.Final_redhat_00001.1.el9eap.noarch.rpm
RedHat	9	noarch	eap8-jose4j	< 0.9.6-1.redhat_00001.1.el9eap	eap8-jose4j-0.9.6-1.redhat_00001.1.el9eap.noarch.rpm
RedHat	9	noarch	eap8-wildfly-modules	< 8.0.2-5.GA_redhat_00012.1.el9eap	eap8-wildfly-modules-8.0.2-5.GA_redhat_00012.1.el9eap.noarch.rpm
RedHat	8	noarch	eap8-wildfly-java-jdk17	< 8.0.2-5.GA_redhat_00012.1.el8eap	eap8-wildfly-java-jdk17-8.0.2-5.GA_redhat_00012.1.el8eap.noarch.rpm
RedHat	9	noarch	eap8-hibernate-core	< 6.2.26-1.Final_redhat_00001.1.el9eap	eap8-hibernate-core-6.2.26-1.Final_redhat_00001.1.el9eap.noarch.rpm