RHSA-2017%3A3240 — Vulnetix

RHSA-2017%3A3240 PUBLISHED CVSS 7.5 HIGH

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 and Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. [Updated 21st November 2017] Previously, this erratum was marked as a replacement of the JBoss Enterprise Application Platform 6.4.16 Natives. This was incorrect; the erratum is an update, not a replacement. The erratum text has been modified to reflect this.

Risk Scores

CVSS 3.1

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
	httpd
	Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
	mod_ldap
	mod_cluster
	mod_ssl
	Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
	jbcs

Exploit Intelligence

Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183) (github-poc-repo)
Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183) (github-poc-repo)
Simplified Version of Cryptography Attack based on Birthday Paradox: Sweet32 (CVE-2016-2183) (github-poc-repo)
Checks a shared hosting environment for CVE-2017-9798 (github-poc-repo)
Checks a shared hosting environment for CVE-2017-9798 (github-poc-repo)
Checks a shared hosting environment for CVE-2017-9798 (github-poc-repo)
CVE-2017-9798 (github-poc-repo)
CVE-2017-9798 (github-poc-repo)
CVE-2017-9798 (github-poc-repo)
l0n3rs/CVE-2017-9798 (github-poc-repo)

…and 35 more exploits

Timeline

Nov 16, 2017 CVE Published
Nov 14, 2024 CVE Updated
Apr 11, 2025 PoC Published
Apr 2, 2026 Distribution Patch
Apr 2, 2026 Distribution Patch
Apr 2, 2026 Security Advisory
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory

References

Open in Interactive Console →