VDB
BDU%3A2023-06409
BDU%3A2023-06409
PUBLISHED
CVSS 7.5 HIGH
Уязвимость компонентов Hashtable и HashMap платформы Red Hat JBoss Enterprise Application Platform, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | 0:3.15.8-1.Final_redhat_00001.1.el7eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:1.12.2-1.Final_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:3.8.10-1.Final_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | * |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | 0:1.15.20-1.Final_redhat_00001.1.el7eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:5.3.31-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:4.1.94-1.Final_redhat_00001.1.el8eap |
| Red Hat Inc. | JBoss Enterprise Application Platform | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:1.76.0-4.redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:4.1.94-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:3.3.19-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:1.5.15-1.Final_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:1.76.0-4.redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:1.15.20-1.Final_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:1.4.5-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:1.15.20-1.Final_redhat_00001.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | 0:1.10.0-31.Final_redhat_00030.1.el9eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | 0:2.16.0-15.redhat_00049.1.el7eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:2.0.13-2.SP1_redhat_00001.1.el8eap |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | 0:3.3.19-1.Final_redhat_00001.1.el8eap |
…and 30 more
Timeline
- Oct 9, 2023 CVE Published
- Dec 27, 2023 PoC Published
- May 6, 2026 Distribution Patch
- May 6, 2026 Distribution Patch
- May 6, 2026 Distribution Patch
- May 6, 2026 Distribution Patch
- May 6, 2026 Security Advisory
- May 6, 2026 Security Advisory
- May 6, 2026 Security Advisory
- May 6, 2026 Security Advisory
References
- https://access.redhat.com/security/cve/cve-2023-3171 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2213639 url
- https://vuldb.com/ru/?id.241434 url
- RHSA-2023:5484 vendor-advisory
- RHSA-2023:5485 vendor-advisory
- RHSA-2023:5486 vendor-advisory
- RHSA-2023:5488 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-3171 vdb