CVE-2016-2141
Fixed in a distro release EPSS 5%
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.
Products: redhat jgroups, redhat jboss_enterprise_application_platform
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jgroups:jgroups | 3.6.10.Final |
| Maven | org.jgroups:jgroups | 3.2.16.Final |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libjgroups-java | no fix |
| Debian 13 | libjgroups-java | no fix |
| Debian 14 | libjgroups-java | no fix |
| Red Hat jboss enterprise application platform 5 | jgroups | 1:2.6.22-2.ep5.el4 |
| Red Hat jboss enterprise application platform 5 | jgroups | 1:2.6.22-2.ep5.el5 |
| Red Hat jboss enterprise application platform 5 | jgroups | 1:2.6.22-2.ep5.el6 |
| Red Hat jboss enterprise application platform 6 | apache-cxf | 0:2.7.18-2.SP1_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | apache-cxf | 0:2.7.18-2.SP1_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | glassfish-jsf-eap6 | 0:2.1.28-11.SP10_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | glassfish-jsf-eap6 | 0:2.1.28-11.SP10_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | hibernate4-validator | 0:4.3.3-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | hibernate4-validator | 0:4.3.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | hornetq | 0:2.3.25-13.SP11_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | hornetq | 0:2.3.25-13.SP11_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-appclient | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-appclient | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cli | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cli | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-client-all | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-client-all | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-clustering | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-clustering | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cmp | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cmp | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-configadmin | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-configadmin | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-connector | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-connector | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller-client | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller-client | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-core-security | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-core-security | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-repository | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-repository | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-scanner | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-scanner | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-http | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-http | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-management | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-management | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee-deployment | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee-deployment | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ejb3 | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ejb3 | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-embedded | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-embedded | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-host-controller | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-host-controller | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jacorb | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jacorb | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxr | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxr | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxrs | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxrs | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jdr | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jdr | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jmx | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jmx | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jpa | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jpa | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsf | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsf | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsr77 | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsr77 | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-logging | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-logging | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-mail | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-mail | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-management-client-content | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-management-client-content | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-messaging | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-messaging | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-modcluster | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-modcluster | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-naming | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-naming | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-network | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-network | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-configadmin | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-configadmin | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-service | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-service | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-picketlink | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-picketlink | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-platform-mbean | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-platform-mbean | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-pojo | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-pojo | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-process-controller | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-process-controller | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-protocol | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-protocol | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-remoting | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-remoting | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-sar | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-sar | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-security | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-security | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-server | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-server | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-system-jmx | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-system-jmx | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-threads | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-threads | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-transactions | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-transactions | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-version | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-version | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-webservices | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-webservices | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-weld | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-weld | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-xts | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-xts | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-ec2-eap | 0:7.5.9-2.Final_redhat_2.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-ec2-eap-samples | 0:7.5.9-2.Final_redhat_2.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-jsf-api_2.1_spec | 0:2.1.28-6.SP2_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-jsf-api_2.1_spec | 0:2.1.28-6.SP2_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-msc | 0:1.1.6-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-msc | 0:1.1.6-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-appclient | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-appclient | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-bundles | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-bundles | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-core | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-core | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-domain | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-domain | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-javadocs | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-javadocs | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-modules-eap | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-modules-eap | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-product-eap | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-product-eap | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-standalone | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-standalone | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-welcome-content-eap | 0:7.5.9-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-welcome-content-eap | 0:7.5.9-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossts | 1:4.17.34-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossts | 1:4.17.34-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.17-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.17-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jgroups | 1:3.2.16-1.Final_redhat_1.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jgroups | 1:3.2.16-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jgroups | 1:3.2.16-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | picketlink-bindings | 0:2.5.4-11.SP9_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | picketlink-bindings | 0:2.5.4-11.SP9_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | picketlink-federation | 0:2.5.4-11.SP9_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | picketlink-federation | 0:2.5.4-11.SP9_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | xalan-j2-eap6 | 0:2.7.1-11.redhat_11.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | xalan-j2-eap6 | 0:2.7.1-11.redhat_11.1.ep6.el7 |
| Red Hat jboss enterprise application platform 7 | eap7-jgroups | 0:3.6.8-3.Final_redhat_3.1.ep7.el7 |
| Red Hat jboss enterprise application platform 7 | eap7-jgroups | 0:3.6.8-3.Final_redhat_3.1.ep7.el6 |
| Ubuntu 16.04 LTS | libjgroups-java | no fix |
| Ubuntu 18.04 LTS | libjgroups-java | no fix |
| Ubuntu 20.04 LTS | libjgroups-java | no fix |
| Ubuntu 22.04 LTS | libjgroups-java | no fix |
| Ubuntu 24.04 LTS | libjgroups-java | no fix |
| Ubuntu 25.10 | libjgroups-java | no fix |
| Ubuntu 26.04 LTS | libjgroups-java | no fix |
| Ubuntu 26.10 | libjgroups-java | no fix |