CVE-2018-1114
Uncontrolled Resource Consumption in Undertow
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.5
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
CVE-2018-1114- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2022-3969
6.5
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
EUVD-2022-3969- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gjjx-gqm4-wcgm
6.5
Uncontrolled Resource Consumption in Undertow
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
GHSA-gjjx-gqm4-wcgm- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
6.5
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
CVE-2018-1114- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
OSV
6.5
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
CVE-2018-1114- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-1114
6.5
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
DEBIAN-CVE-2018-1114- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-gjjx-gqm4-wcgm
6.5
Uncontrolled Resource Consumption in Undertow
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
GHSA-gjjx-gqm4-wcgm- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRHSA-2018:2089
8.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2018:2089- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2090
8.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2018:2090- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2643
8.5
Red Hat Security Advisory: rhvm-appliance security update
- Record
RHSA-2018:2643- CVSS 3.0
- 8.5 High
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-1114
6.5
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
- Record
UBUNTU-CVE-2018-1114- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.undertow:undertow-coreMaven |
through 1.4.24.FInal | 1.4.25.Final |
io.undertow:undertow-coreMaven |
2.0.0.Alpha1 to 2.0.4.Final | 2.0.5.Final |
undertowDebian:14 |
before 1.4.25-1, plus listed versions 1.3.11-11.3.16-11.3.19-11.3.21-11.3.23-1 Show 18 moreShow less1.3.4-11.3.5-11.3.7-11.4.0-11.4.1-11.4.18-11.4.20-11.4.21-11.4.21-21.4.22-11.4.23-11.4.23-21.4.23-31.4.3-11.4.4-11.4.6-11.4.7-11.4.8-1 |
1.4.25-1 |
io.undertow:undertow-coreMaven |
before 1.4.25.Final, plus listed versions 1.0.0.Alpha11.0.0.Alpha101.0.0.Alpha111.0.0.Alpha121.0.0.Alpha13 Show 45 moreShow less1.0.0.Alpha141.0.0.Alpha151.0.0.Alpha161.0.0.Alpha171.0.0.Alpha181.0.0.Alpha191.0.0.Alpha21.0.0.Alpha201.0.0.Alpha211.0.0.Alpha221.0.0.Alpha31.0.0.Alpha41.0.0.Alpha51.0.0.Alpha61.0.0.Alpha71.0.0.Alpha81.0.0.Alpha91.0.0.Beta11.0.0.Beta101.0.0.Beta111.0.0.Beta121.0.0.Beta131.0.0.Beta141.0.0.Beta151.0.0.Beta161.0.0.Beta171.0.0.Beta181.0.0.Beta191.0.0.Beta21.0.0.Beta201.0.0.Beta211.0.0.Beta221.0.0.Beta231.0.0.Beta241.0.0.Beta251.0.0.Beta261.0.0.Beta271.0.0.Beta281.0.0.Beta291.0.0.Beta31.0.0.Beta301.0.0.Beta311.0.0.Beta321.0.0.Beta331.0.0.Beta4 |
1.4.25.Final |
io.undertow:undertow-coreMaven |
2.0.0.Alpha1 up to 2.0.5.Final, plus listed versions 2.0.0.Beta12.0.0.Final2.0.1.Final2.0.2.Final2.0.3.Final2.0.4.Final |
2.0.5.Final |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
Show 175 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-nativeRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el7 | 0:1.5.5.012-1.redhat_1.1.ep7.el7 |
eap7-commons-logging-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.3-1.Final_redhat_1.1.ep7.el7 | 0:1.0.3-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el7 | 0:5.1.14-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el7 | 0:5.1.14-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el7 | 0:5.1.14-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el7 | 0:5.1.14-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-infinispanRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el7 | 0:5.1.14-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el7 | 0:5.1.14-1.Final_redhat_1.1.ep7.el7 |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el7 | 0:8.2.11-1.Final_redhat_1.1.ep7.el7 |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el7 | 0:8.2.11-1.Final_redhat_1.1.ep7.el7 |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el7 | 0:8.2.11-1.Final_redhat_1.1.ep7.el7 |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el7 | 0:8.2.11-1.Final_redhat_1.1.ep7.el7 |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el7 | 0:8.2.11-1.Final_redhat_1.1.ep7.el7 |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el7 | 0:8.2.11-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el7 | 0:1.4.9-1.Final_redhat_1.1.ep7.el7 |
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.8.11.1-1.redhat_1.1.ep7.el7 | 0:2.8.11.1-1.redhat_1.1.ep7.el7 |
eap7-jackson-jaxrs-baseRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el7 | 0:2.8.11-2.redhat_1.1.ep7.el7 |
eap7-jackson-jaxrs-json-providerRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el7 | 0:2.8.11-2.redhat_1.1.ep7.el7 |
eap7-jackson-jaxrs-providersRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el7 | 0:2.8.11-2.redhat_1.1.ep7.el7 |
eap7-jackson-module-jaxb-annotationsRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el7 | 0:2.8.11-2.redhat_1.1.ep7.el7 |
eap7-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.0.10-1.Final_redhat_1.1.ep7.el7 | 0:2.0.10-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-marshallingRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.0.5-1.Final_redhat_1.1.ep7.el7 | 0:2.0.5-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-marshalling-riverRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.0.5-1.Final_redhat_1.1.ep7.el7 | 0:2.0.5-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-modulesRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.6.4-1.Final_redhat_1.1.ep7.el7 | 0:1.6.4-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:5.0.7-1.Final_redhat_1.1.ep7.el7 | 0:5.0.7-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-eap6.4Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-eap6.4-to-eap7.0Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-eap6.4-to-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-eap7.0Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-eap7.0-to-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly10.0Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly10.0-to-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly10.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly10.1-to-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly8.2Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly8.2-to-eap7.0Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly8.2-to-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly9.0Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly9.0-to-eap7.0Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-jboss-server-migration-wildfly9.0-to-eap7.1Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el7 | 0:1.0.6-3.Final_redhat_3.1.ep7.el7 |
eap7-picketlink-apiRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-bindingsRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-commonRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-configRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-federationRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-idm-apiRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-idm-implRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-idm-simple-schemaRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-implRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-picketlink-wildfly8Red Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el7 |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.4.18-6.SP7_redhat_1.1.ep7.el7 | 0:1.4.18-6.SP7_redhat_1.1.ep7.el7 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:7.1.3-2.GA_redhat_2.1.ep7.el7 | 0:7.1.3-2.GA_redhat_2.1.ep7.el7 |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.1.10-1.Final_redhat_1.1.ep7.el7 | 0:1.1.10-1.Final_redhat_1.1.ep7.el7 |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.7-1.Final_redhat_1.1.ep7.el7 | 0:1.0.7-1.Final_redhat_1.1.ep7.el7 |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:7.1.3-1.GA_redhat_2.1.ep7.el7 | 0:7.1.3-1.GA_redhat_2.1.ep7.el7 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:7.1.3-2.GA_redhat_2.1.ep7.el7 | 0:7.1.3-2.GA_redhat_2.1.ep7.el7 |
eap7-wildfly-naming-clientRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.8-1.Final_redhat_1.1.ep7.el7 | 0:1.0.8-1.Final_redhat_1.1.ep7.el7 |
eap7-wildfly-opensslRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-1.Final_redhat_1.1.ep7.el7 | 0:1.0.6-1.Final_redhat_1.1.ep7.el7 |
eap7-wildfly-openssl-javaRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:1.0.6-1.Final_redhat_1.1.ep7.el7 | 0:1.0.6-1.Final_redhat_1.1.ep7.el7 |
eap7-wildfly-web-console-eapRed Hat:jboss_enterprise_application_platform:7.1::el7 From an advisory covering 2 CVEs |
before 0:2.9.17-1.Final_redhat_1.1.ep7.el7 | 0:2.9.17-1.Final_redhat_1.1.ep7.el7 |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-nativeRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.5.5.012-1.redhat_1.1.ep7.el6 | 0:1.5.5.012-1.redhat_1.1.ep7.el6 |
eap7-commons-logging-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.3-1.Final_redhat_1.1.ep7.el6 | 0:1.0.3-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el6 | 0:5.1.14-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el6 | 0:5.1.14-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el6 | 0:5.1.14-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el6 | 0:5.1.14-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-infinispanRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el6 | 0:5.1.14-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.1.14-1.Final_redhat_1.1.ep7.el6 | 0:5.1.14-1.Final_redhat_1.1.ep7.el6 |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el6 | 0:8.2.11-1.Final_redhat_1.1.ep7.el6 |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el6 | 0:8.2.11-1.Final_redhat_1.1.ep7.el6 |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el6 | 0:8.2.11-1.Final_redhat_1.1.ep7.el6 |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el6 | 0:8.2.11-1.Final_redhat_1.1.ep7.el6 |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el6 | 0:8.2.11-1.Final_redhat_1.1.ep7.el6 |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:8.2.11-1.Final_redhat_1.1.ep7.el6 | 0:8.2.11-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.9-1.Final_redhat_1.1.ep7.el6 | 0:1.4.9-1.Final_redhat_1.1.ep7.el6 |
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.8.11.1-1.redhat_1.1.ep7.el6 | 0:2.8.11.1-1.redhat_1.1.ep7.el6 |
eap7-jackson-jaxrs-baseRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el6 | 0:2.8.11-2.redhat_1.1.ep7.el6 |
eap7-jackson-jaxrs-json-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el6 | 0:2.8.11-2.redhat_1.1.ep7.el6 |
eap7-jackson-jaxrs-providersRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el6 | 0:2.8.11-2.redhat_1.1.ep7.el6 |
eap7-jackson-module-jaxb-annotationsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.8.11-2.redhat_1.1.ep7.el6 | 0:2.8.11-2.redhat_1.1.ep7.el6 |
eap7-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.0.10-1.Final_redhat_1.1.ep7.el6 | 0:2.0.10-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-marshallingRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.0.5-1.Final_redhat_1.1.ep7.el6 | 0:2.0.5-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-marshalling-riverRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.0.5-1.Final_redhat_1.1.ep7.el6 | 0:2.0.5-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-modulesRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.6.4-1.Final_redhat_1.1.ep7.el6 | 0:1.6.4-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:5.0.7-1.Final_redhat_1.1.ep7.el6 | 0:5.0.7-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-eap6.4Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-eap6.4-to-eap7.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-eap6.4-to-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-eap7.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-eap7.0-to-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly10.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly10.0-to-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly10.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly10.1-to-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly8.2Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly8.2-to-eap7.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly8.2-to-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly9.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly9.0-to-eap7.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-jboss-server-migration-wildfly9.0-to-eap7.1Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-3.Final_redhat_3.1.ep7.el6 | 0:1.0.6-3.Final_redhat_3.1.ep7.el6 |
eap7-picketlink-apiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-bindingsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-commonRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-configRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-federationRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-idm-apiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-idm-implRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-idm-simple-schemaRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-implRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-picketlink-wildfly8Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 | 0:2.5.5-12.SP11_redhat_1.1.ep7.el6 |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.4.18-6.SP7_redhat_1.1.ep7.el6 | 0:1.4.18-6.SP7_redhat_1.1.ep7.el6 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:7.1.3-2.GA_redhat_2.1.ep7.el6 | 0:7.1.3-2.GA_redhat_2.1.ep7.el6 |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.1.10-1.Final_redhat_1.1.ep7.el6 | 0:1.1.10-1.Final_redhat_1.1.ep7.el6 |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.7-1.Final_redhat_1.1.ep7.el6 | 0:1.0.7-1.Final_redhat_1.1.ep7.el6 |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:7.1.3-1.GA_redhat_2.1.ep7.el6 | 0:7.1.3-1.GA_redhat_2.1.ep7.el6 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:7.1.3-2.GA_redhat_2.1.ep7.el6 | 0:7.1.3-2.GA_redhat_2.1.ep7.el6 |
eap7-wildfly-naming-clientRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.8-1.Final_redhat_1.1.ep7.el6 | 0:1.0.8-1.Final_redhat_1.1.ep7.el6 |
eap7-wildfly-opensslRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-1.Final_redhat_1.1.ep7.el6 | 0:1.0.6-1.Final_redhat_1.1.ep7.el6 |
eap7-wildfly-openssl-javaRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:1.0.6-1.Final_redhat_1.1.ep7.el6 | 0:1.0.6-1.Final_redhat_1.1.ep7.el6 |
eap7-wildfly-web-console-eapRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 2 CVEs |
before 0:2.9.17-1.Final_redhat_1.1.ep7.el6 | 0:2.9.17-1.Final_redhat_1.1.ep7.el6 |
rhvm-applianceRed Hat:enterprise_linux:7::hypervisor From an advisory covering 7 CVEs |
before 2:4.2-20180828.0.el7 | 2:4.2-20180828.0.el7 |
undertowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.4-11.3.5-11.3.7-11.3.11-11.3.16-11.3.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.22-11.4.23-11.4.23-2build11.4.23-31.4.23-3ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.23-12.0.27-12.0.28-12.0.29-12.0.29-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.2.8-12.2.12-12.2.13-12.2.14-12.2.16-12.2.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.3.8-22.3.8-2ubuntu0.1~esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-1114 is a medium vulnerability (CVSS 6.5) in Red Hat Undertow, published September 11, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. Fixed in io.undertow:undertow-core 1.4.25.Final.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1114
access.redhat.com/errata/RHSA-2018:2669
access.redhat.com/errata/RHSA-2018:2643
issues.jboss.org/browse/UNDERTOW-1338
bugs.openjdk.java.net/browse/JDK-6956385
access.redhat.com/errata/RHSA-2019:0877
Show 52 moreShow less
nvd.nist.gov/vuln/detail/CVE-2018-1114
github.com/advisories/GHSA-gjjx-gqm4-wcgm
security-tracker.debian.org/tracker/CVE-2018-1114
access.redhat.com/errata/RHSA-2018:2089
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform?version=7.1
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide
bugzilla.redhat.com/show_bug.cgi?id=1549276
issues.redhat.com/browse/JBEAP-14431
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2089.json
access.redhat.com/security/cve/CVE-2018-1114
bugzilla.redhat.com/show_bug.cgi?id=1573045
cve.org/CVERecord?id=CVE-2018-1114
access.redhat.com/security/cve/CVE-2018-7489
cve.org/CVERecord?id=CVE-2018-7489
nvd.nist.gov/vuln/detail/CVE-2018-7489
access.redhat.com/solutions/3442891
access.redhat.com/errata/RHSA-2018:2090
issues.redhat.com/browse/JBEAP-14430
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2090.json
bugzilla.redhat.com/show_bug.cgi?id=1550671
bugzilla.redhat.com/show_bug.cgi?id=1573391
bugzilla.redhat.com/show_bug.cgi?id=1588306
bugzilla.redhat.com/show_bug.cgi?id=1593527
bugzilla.redhat.com/show_bug.cgi?id=1595332
bugzilla.redhat.com/show_bug.cgi?id=1609891
bugzilla.redhat.com/show_bug.cgi?id=1616249
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2643.json
access.redhat.com/security/cve/CVE-2018-1067
cve.org/CVERecord?id=CVE-2018-1067
nvd.nist.gov/vuln/detail/CVE-2018-1067
access.redhat.com/security/cve/CVE-2018-8039
cve.org/CVERecord?id=CVE-2018-8039
nvd.nist.gov/vuln/detail/CVE-2018-8039
cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1&modificationDate=1530184663000&api=v2
access.redhat.com/security/cve/CVE-2018-10237
cve.org/CVERecord?id=CVE-2018-10237
nvd.nist.gov/vuln/detail/CVE-2018-10237
github.com/google/guava/wiki/CVE-2018-10237
groups.google.com/forum
access.redhat.com/security/cve/CVE-2018-10862
cve.org/CVERecord?id=CVE-2018-10862
nvd.nist.gov/vuln/detail/CVE-2018-10862
snyk.io/research/zip-slip-vulnerability
access.redhat.com/security/cve/CVE-2018-10915
cve.org/CVERecord?id=CVE-2018-10915
nvd.nist.gov/vuln/detail/CVE-2018-10915
postgresql.org/about/news/1878
access.redhat.com/security/cve/CVE-2018-1000180
cve.org/CVERecord?id=CVE-2018-1000180
nvd.nist.gov/vuln/detail/CVE-2018-1000180
ubuntu.com/security/CVE-2018-1114
Left out here: 160 versions. The JSON record has them.