CVE-2016-3110
mod_cluster Denial of Service vulnerability
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
- Record
CVE-2016-3110- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
- Record
CVE-2016-3110- Updated
- 2026-11-02
EUVDEUVD-2016-4163 No score
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
- Record
EUVD-2016-4163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-68qq-3phh-53j7
7.5
mod_cluster Denial of Service vulnerability
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
- Record
GHSA-68qq-3phh-53j7- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVGHSA-68qq-3phh-53j7
7.5
mod_cluster Denial of Service vulnerability
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
- Record
GHSA-68qq-3phh-53j7- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVRHSA-2016:1648
5.6
Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.1 security update on RHEL 7
- Record
RHSA-2016:1648- CVSS 3.0
- 5.6 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2016:1649
5.6
Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6
- Record
RHSA-2016:1649- CVSS 3.0
- 5.6 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2016:2054
5.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 7
- Record
RHSA-2016:2054- CVSS 3.0
- 5.1 Medium
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2016:2055
5.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 6
- Record
RHSA-2016:2055- CVSS 3.0
- 5.1 Medium
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jboss.mod_cluster:mod_cluster-parentMaven |
before 1.3.3.Final | 1.3.3.Final |
org.jboss.mod_cluster:mod_cluster-parentMaven |
before 1.3.3.Final, plus listed versions 1.2.0.Beta11.2.0.Beta21.2.0.Beta41.2.0.Final1.2.1.Beta1 Show 23 moreShow less1.2.1.Beta21.2.1.Final1.2.10.Final1.2.11.Final1.2.12.Final1.2.13.Final1.2.14.Final1.2.2.Final1.2.3.Final1.2.4.Final1.2.5.Final1.2.6.Final1.2.7.Final1.2.8.Final1.2.9.Final1.3.0.Alpha11.3.0.Final1.3.1.Alpha11.3.1.Alpha21.3.1.Beta11.3.1.Beta21.3.1.Final1.3.2.Final |
1.3.3.Final |
httpd22Red Hat:jboss_enterprise_web_server:2::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-develRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-manualRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-toolsRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
jbcs-httpd24Red Hat:jboss_enterprise_web_server:2::el7 |
before 0:1-3.jbcs.el7 | 0:1-3.jbcs.el7 |
jbcs-httpd24-opensslRed Hat:jboss_enterprise_web_server:2::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_enterprise_web_server:2::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jbcs-httpd24-openssl-develRed Hat:jboss_enterprise_web_server:2::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-libsRed Hat:jboss_enterprise_web_server:2::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-perlRed Hat:jboss_enterprise_web_server:2::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-staticRed Hat:jboss_enterprise_web_server:2::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-runtimeRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1-3.jbcs.el7 | 0:1-3.jbcs.el7 |
mod_clusterRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.13-1.Final_redhat_1.1.ep6.el7 | 0:1.2.13-1.Final_redhat_1.1.ep6.el7 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.13-3.Final_redhat_2.ep6.el7 | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.13-3.Final_redhat_2.ep6.el7 | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.13-1.Final_redhat_1.1.ep6.el7 | 0:1.2.13-1.Final_redhat_1.1.ep6.el7 |
mod_cluster-tomcat7Red Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.13-1.Final_redhat_1.1.ep6.el7 | 0:1.2.13-1.Final_redhat_1.1.ep6.el7 |
mod_jkRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.41-2.redhat_3.ep6.el7 | 0:1.2.41-2.redhat_3.ep6.el7 |
mod_jk-ap22Red Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.41-2.redhat_3.ep6.el7 | 0:1.2.41-2.redhat_3.ep6.el7 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.41-2.redhat_3.ep6.el7 | 0:1.2.41-2.redhat_3.ep6.el7 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.2.41-2.redhat_3.ep6.el7 | 0:1.2.41-2.redhat_3.ep6.el7 |
mod_ssl22Red Hat:jboss_enterprise_web_server:2::el7 |
before 1:2.2.26-56.ep6.el7 | 1:2.2.26-56.ep6.el7 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:2::el7 |
before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
httpdRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-develRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-manualRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-toolsRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
jbcs-httpd24Red Hat:jboss_enterprise_web_server:2::el6 |
before 0:1-3.jbcs.el6 | 0:1-3.jbcs.el6 |
jbcs-httpd24-opensslRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-develRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-libsRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-perlRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-staticRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-runtimeRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1-3.jbcs.el6 | 0:1-3.jbcs.el6 |
mod_clusterRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.13-1.Final_redhat_1.1.ep6.el6 | 0:1.2.13-1.Final_redhat_1.1.ep6.el6 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.13-3.Final_redhat_2.ep6.el6 | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.13-3.Final_redhat_2.ep6.el6 | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.13-1.Final_redhat_1.1.ep6.el6 | 0:1.2.13-1.Final_redhat_1.1.ep6.el6 |
mod_cluster-tomcat7Red Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.13-1.Final_redhat_1.1.ep6.el6 | 0:1.2.13-1.Final_redhat_1.1.ep6.el6 |
mod_jkRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.41-2.redhat_3.ep6.el6 | 0:1.2.41-2.redhat_3.ep6.el6 |
mod_jk-ap22Red Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.41-2.redhat_3.ep6.el6 | 0:1.2.41-2.redhat_3.ep6.el6 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.41-2.redhat_3.ep6.el6 | 0:1.2.41-2.redhat_3.ep6.el6 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.2.41-2.redhat_3.ep6.el6 | 0:1.2.41-2.redhat_3.ep6.el6 |
mod_sslRed Hat:jboss_enterprise_web_server:2::el6 |
before 1:2.2.26-54.ep6.el6 | 1:2.2.26-54.ep6.el6 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:2::el6 |
before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.3.25-4.SP11_redhat_1.ep6.el7 | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
hornetq-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.3.25-4.SP11_redhat_1.ep6.el7 | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
httpd22Red Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-develRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-manualRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-toolsRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
jbcs-httpd24Red Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1-3.jbcs.el7 | 0:1-3.jbcs.el7 |
jbcs-httpd24-opensslRed Hat:jboss_enterprise_application_platform:6::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-develRed Hat:jboss_enterprise_application_platform:6::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-libsRed Hat:jboss_enterprise_application_platform:6::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-perlRed Hat:jboss_enterprise_application_platform:6::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-staticRed Hat:jboss_enterprise_application_platform:6::el7 |
before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-runtimeRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1-3.jbcs.el7 | 0:1-3.jbcs.el7 |
jbossas-hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.3.25-4.SP11_redhat_1.ep6.el7 | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
jbossas-jbossweb-nativeRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
mod_cluster-nativeRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.2.13-3.Final_redhat_2.ep6.el7 | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.2.13-3.Final_redhat_2.ep6.el7 | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
mod_jkRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.2.41-2.redhat_4.ep6.el7 | 0:1.2.41-2.redhat_4.ep6.el7 |
mod_jk-ap22Red Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.2.41-2.redhat_4.ep6.el7 | 0:1.2.41-2.redhat_4.ep6.el7 |
mod_jk-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.2.41-2.redhat_4.ep6.el7 | 0:1.2.41-2.redhat_4.ep6.el7 |
mod_ldap22Red Hat:jboss_enterprise_application_platform:6::el7 |
before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
mod_ssl22Red Hat:jboss_enterprise_application_platform:6::el7 |
before 1:2.2.26-56.ep6.el7 | 1:2.2.26-56.ep6.el7 |
tomcat-nativeRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 |
before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.3.25-4.SP11_redhat_1.ep6.el6 | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
hornetq-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.3.25-4.SP11_redhat_1.ep6.el6 | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
httpdRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-develRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-manualRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-toolsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
jbcs-httpd24Red Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1-3.jbcs.el6 | 0:1-3.jbcs.el6 |
jbcs-httpd24-opensslRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-develRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-libsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-perlRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-staticRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-runtimeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1-3.jbcs.el6 | 0:1-3.jbcs.el6 |
jbossas-hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.3.25-4.SP11_redhat_1.ep6.el6 | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
jbossas-jbossweb-nativeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
mod_cluster-nativeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.2.13-3.Final_redhat_2.ep6.el6 | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.2.13-3.Final_redhat_2.ep6.el6 | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
mod_jkRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.2.41-2.redhat_4.ep6.el6 | 0:1.2.41-2.redhat_4.ep6.el6 |
mod_jk-ap22Red Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.2.41-2.redhat_4.ep6.el6 | 0:1.2.41-2.redhat_4.ep6.el6 |
mod_jk-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.2.41-2.redhat_4.ep6.el6 | 0:1.2.41-2.redhat_4.ep6.el6 |
mod_ldapRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
mod_sslRed Hat:jboss_enterprise_application_platform:6::el6 |
before 1:2.2.26-54.ep6.el6 | 1:2.2.26-54.ep6.el6 |
tomcat-nativeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-3110 is a high vulnerability (CVSS 7.5) in Fedoraproject Fedora, published September 26, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.64%, the 89th percentile. Fixed in org.jboss.mod_cluster:mod_cluster-parent 1.3.3.Final.
References
rhn.redhat.com/errata/RHSA-2016-2056.html
bugzilla.redhat.com/show_bug.cgi?id=1326320
rhn.redhat.com/errata/RHSA-2016-1648.html
securityfocus.com/bid/92584
rhn.redhat.com/errata/RHSA-2016-2055.html
rhn.redhat.com/errata/RHSA-2016-1649.html
Show 66 moreShow less
rhn.redhat.com/errata/RHSA-2016-1650.html
rhn.redhat.com/errata/RHSA-2016-2054.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CX5QNNIVAUB2VVDV6TR3YMFTL6VRKOBO
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6JMA2YLPK6SEUVF5Q3QEANHYEPRZA2RI
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HE5YZTBZRXCMQFT5LDLZG2HAYBKMYQLL
nvd.nist.gov/vuln/detail/CVE-2016-3110
lists.fedoraproject.org/archives/list/[email protected]/message/6JMA2YLPK6SEUVF5Q3QEANHYEPRZA2RI
lists.fedoraproject.org/archives/list/[email protected]/message/CX5QNNIVAUB2VVDV6TR3YMFTL6VRKOBO
lists.fedoraproject.org/archives/list/[email protected]/message/HE5YZTBZRXCMQFT5LDLZG2HAYBKMYQLL
web.archive.org/web/20200227231527/http://www.securityfocus.com/bid/92584
github.com/advisories/GHSA-68qq-3phh-53j7
github.com/modcluster/mod_cluster
access.redhat.com/errata/RHSA-2016:1648
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-US/Red_Hat_JBoss_Web_Server/2.1/html/2.1.1_Release_Notes/index.html
access.redhat.com/site/documentation
access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Web_Server/2/html-single/Installation_Guide/index.html
access.redhat.com/security/vulnerabilities/httpoxy
bugzilla.redhat.com/show_bug.cgi?id=1331441
bugzilla.redhat.com/show_bug.cgi?id=1331536
bugzilla.redhat.com/show_bug.cgi?id=1337155
bugzilla.redhat.com/show_bug.cgi?id=1337397
bugzilla.redhat.com/show_bug.cgi?id=1338646
bugzilla.redhat.com/show_bug.cgi?id=1353755
bugzilla.redhat.com/show_bug.cgi?id=1358118
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1648.json
access.redhat.com/security/cve/CVE-2016-2105
cve.org/CVERecord?id=CVE-2016-2105
nvd.nist.gov/vuln/detail/CVE-2016-2105
openssl.org/news/secadv/20160503.txt
access.redhat.com/security/cve/CVE-2016-2106
cve.org/CVERecord?id=CVE-2016-2106
nvd.nist.gov/vuln/detail/CVE-2016-2106
access.redhat.com/security/cve/CVE-2016-3110
cve.org/CVERecord?id=CVE-2016-3110
access.redhat.com/security/cve/CVE-2016-5387
cve.org/CVERecord?id=CVE-2016-5387
nvd.nist.gov/vuln/detail/CVE-2016-5387
httpoxy.org
apache.org/security/asf-httpoxy-response.txt
access.redhat.com/errata/RHSA-2016:1649
bugzilla.redhat.com/show_bug.cgi?id=1337396
bugzilla.redhat.com/show_bug.cgi?id=1366541
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1649.json
access.redhat.com/errata/RHSA-2016:2054
access.redhat.com/articles/2688611
access.redhat.com/solutions/222023
access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
bugzilla.redhat.com/show_bug.cgi?id=1243887
bugzilla.redhat.com/show_bug.cgi?id=1341583
bugzilla.redhat.com/show_bug.cgi?id=1345989
bugzilla.redhat.com/show_bug.cgi?id=1345993
bugzilla.redhat.com/show_bug.cgi?id=1345997
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2054.json
access.redhat.com/security/cve/CVE-2015-3183
cve.org/CVERecord?id=CVE-2015-3183
nvd.nist.gov/vuln/detail/CVE-2015-3183
access.redhat.com/security/cve/CVE-2016-4459
cve.org/CVERecord?id=CVE-2016-4459
nvd.nist.gov/vuln/detail/CVE-2016-4459
access.redhat.com/errata/RHSA-2016:2055
bugzilla.redhat.com/show_bug.cgi?id=1345987
bugzilla.redhat.com/show_bug.cgi?id=1345991
bugzilla.redhat.com/show_bug.cgi?id=1345995
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2055.json