JBoss Core Services on RHEL 7 vulnerabilities

3 known vulnerabilities in JBoss Core Services on RHEL 7 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache HTTP Server: Memory Allocation with Excessive Size Value

  CVE-2026-49975Jun 8, 2026ApacheEPSS 33%

  Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

• 8.1 High severity

  Apache HTTP Server: Heap-based Buffer Overflow

  CVE-2026-28780May 5, 2026ApacheEPSS 1.38%

  Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after

• 7.5 High severity

  nghttp2: Reachable Assertion

  CVE-2026-27135Mar 18, 2026Nghttp2

  nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2`