Red Hat JBoss Enterprise Application Platform 7.1.0 vulnerabilities

2 known vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.1.0 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat Fuse 7.12.1: Memory Allocation with Excessive Size Value

  CVE-2023-3223Sep 27, 2023Red HatEPSS 2.66%

  A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit

• 7.5 High severity

  EAP 7.4.10 release: Loop with Unreachable Exit Condition

  CVE-2023-1108Sep 14, 2023Red HatEPSS 1.77%

  A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.