RHSA-2017%3A3239 — Vulnetix

RHSA-2017%3A3239 PUBLISHED CVSS 7.5 HIGH

An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. [Updated 21st November 2017] Previously, this erratum was marked as a replacement of the JBoss Enterprise Application Platform 6.4.16 Natives. This was incorrect; the erratum is an update, not a replacement. The erratum text has been modified to reflect this.

Risk Scores

CVSS 3.1

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
	Red Hat JBoss Enterprise Application Platform 6.4

Exploit Intelligence

Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183) (github-poc-repo)
Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183) (github-poc-repo)
Checks a shared hosting environment for CVE-2017-9798 (github-poc-repo)
Checks a shared hosting environment for CVE-2017-9798 (github-poc-repo)
CVE-2017-9798 (github-poc-repo)
CVE-2017-9798 (github-poc-repo)
l0n3rs/CVE-2017-9798 (github-poc-repo)
l0n3rs/CVE-2017-9798 (github-poc-repo)
OptionsBleed (CVE-2017-9798) PoC / Scanner (github-poc-repo)
OptionsBleed (CVE-2017-9798) PoC / Scanner (github-poc-repo)

…and 25 more exploits

Timeline

Nov 16, 2017 CVE Published
Apr 11, 2025 PoC Published
Mar 20, 2026 CVE Updated
Apr 2, 2026 Distribution Patch
Apr 2, 2026 Distribution Patch
Apr 2, 2026 Security Advisory
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory

References

Open in Interactive Console →