CVE-2011-4610
Fixed in a distro release EPSS 2%
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
Products: redhat jboss_communications_platform, redhat jboss_enterprise_application_platform, redhat jboss_enterprise_brms_platform, redhat jboss_enterprise_web_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 5 | jbossweb | 0:2.1.12-3_patch_03.2.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossweb | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | jbossweb | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossweb-el-1.0-api | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossweb-el-1.0-api | 0:2.1.12-3_patch_03.2.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossweb-el-1.0-api | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | jbossweb-jsp-2.1-api | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | jbossweb-jsp-2.1-api | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossweb-jsp-2.1-api | 0:2.1.12-3_patch_03.2.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossweb-lib | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossweb-lib | 0:2.1.12-3_patch_03.2.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossweb-lib | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise application platform 5 | jbossweb-servlet-2.5-api | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jbossweb-servlet-2.5-api | 0:2.1.12-3_patch_03.2.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jbossweb-servlet-2.5-api | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | jbossweb | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jbossweb | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | jbossweb-el-1.0-api | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jbossweb-el-1.0-api | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | jbossweb-jsp-2.1-api | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jbossweb-jsp-2.1-api | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | jbossweb-lib | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jbossweb-lib | 0:2.1.12-3_patch_03.2.ep5.el6 |
| Red Hat jboss enterprise web platform 5 | jbossweb-servlet-2.5-api | 0:2.1.12-3_patch_03.2.ep5.el5 |
| Red Hat jboss enterprise web platform 5 | jbossweb-servlet-2.5-api | 0:2.1.12-3_patch_03.2.ep5.el6 |