CVE-2010-3862
Fixed in a distro release EPSS 3%
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.
Products: redhat jboss_remoting, redhat jboss_enterprise_application_platform, redhat jboss_enterprise_web_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb | 0:2.1.4-1.17.patch04.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxb | 0:2.1.4-1.17.patch04.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxws | 0:2.1.1-1jpp.ep1.13.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | glassfish-jaxws | 0:2.1.1-1jpp.ep1.13.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3 | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3 | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations | 0:3.3.1-2.0.GA_CP04.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations | 0:3.3.1-2.0.GA_CP04.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations-javadoc | 0:3.3.1-2.0.GA_CP04.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-annotations-javadoc | 0:3.3.1-2.0.GA_CP04.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | hibernate3-javadoc | 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | javassist | 0:3.9.0-2.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | javassist | 0:3.9.0-2.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-common | 0:1.2.2-1.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-common | 0:1.2.2-1.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-messaging | 0:1.4.0-4.SP3_CP11.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-messaging | 0:1.4.0-4.SP3_CP11.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-remoting | 0:2.2.3-4.SP3.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-remoting | 0:2.2.3-4.SP3.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam-docs | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam-docs | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2 | 0:2.0.2.FP-1.ep1.26.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2 | 0:2.0.2.FP-1.ep1.26.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2-docs | 0:2.0.2.FP-1.ep1.26.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jboss-seam2-docs | 0:2.0.2.FP-1.ep1.26.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas | 0:4.3.0-8.GA_CP09.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas | 0:4.3.0-8.GA_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-4.3.0.GA_CP09-bin | 0:4.3.0-8.GA_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-4.3.0.GA_CP09-bin | 0:4.3.0-8.GA_CP09.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-client | 0:4.3.0-8.GA_CP09.2.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossas-client | 0:4.3.0-8.GA_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossts | 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossts | 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossweb | 0:2.0.0-7.CP15.0jpp.ep1.1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossweb | 0:2.0.0-7.CP15.0jpp.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws | 0:2.0.1-6.SP2_CP09.2.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws | 0:2.0.1-6.SP2_CP09.2.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-common | 0:1.0.0-3.GA_CP06.1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | jbossws-common | 0:1.0.0-3.GA_CP06.1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jgroups | 1:2.4.9-1.ep1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | jgroups | 1:2.4.9-1.ep1.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | quartz | 0:1.5.2-1jpp.patch01.ep1.4.2.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs | 0:4.3.0-8.GA_CP09.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs | 0:4.3.0-8.GA_CP09.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs-examples | 0:4.3.0-8.GA_CP09.ep1.3.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | rh-eap-docs-examples | 0:4.3.0-8.GA_CP09.ep1.3.el5 |
| Red Hat jboss enterprise application platform 4.3.0 | xalan-j2 | 0:2.7.1-4.ep1.1.el4 |
| Red Hat jboss enterprise application platform 4.3.0 | xalan-j2 | 0:2.7.1-4.ep1.1.el5 |
| Red Hat jboss enterprise application platform 5 | jboss-remoting | 0:2.5.3-5.SP1.1.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jboss-remoting | 0:2.5.3-5.SP1.1.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossas-security-policy-cc | 0:5.1.0-1.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossas-security-policy-cc | 0:5.1.0-1.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossws-cxf | 0:3.1.2-4.SP7.6.jdk6.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossws-cxf | 0:3.1.2-4.SP7.6.jdk6.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jopr-embedded | 0:1.3.4-16.SP1.7.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jopr-embedded | 0:1.3.4-16.SP1.7.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jboss-remoting | 0:2.5.3-5.SP1.1.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jbossws-cxf | 0:3.1.2-4.SP7.6.jdk6.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jopr-embedded | 0:1.3.4-16.SP1.7.ep5.el5 |