CVE-2016-3110
Fixed in a distro release EPSS 4%
mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
Products: redhat jboss_enterprise_application_platform, redhat jboss_enterprise_web_server, fedoraproject fedora
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jboss.mod_cluster:mod_cluster-parent | 1.3.3.Final |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 6 | hornetq-native | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | hornetq-native | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | hornetq-native-debuginfo | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | hornetq-native-debuginfo | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | httpd | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | httpd-debuginfo | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | httpd-devel | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | httpd-manual | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | httpd-tools | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | httpd22 | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | httpd22-debuginfo | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | httpd22-devel | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | httpd22-manual | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | httpd22-tools | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24 | 0:1-3.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24 | 0:1-3.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-debuginfo | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-debuginfo | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-devel | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-devel | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-libs | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-libs | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-perl | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-perl | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-static | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-openssl-static | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-runtime | 0:1-3.jbcs.el6 |
| Red Hat jboss enterprise application platform 6 | jbcs-httpd24-runtime | 0:1-3.jbcs.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-hornetq-native | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-hornetq-native | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-jbossweb-native | 0:1.1.34-5.redhat_1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-jbossweb-native | 0:1.1.34-5.redhat_1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_cluster-native | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_cluster-native | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_cluster-native-debuginfo | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_cluster-native-debuginfo | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_jk | 0:1.2.41-2.redhat_4.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_jk | 0:1.2.41-2.redhat_4.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_jk-ap22 | 0:1.2.41-2.redhat_4.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_jk-ap22 | 0:1.2.41-2.redhat_4.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_jk-debuginfo | 0:1.2.41-2.redhat_4.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_jk-debuginfo | 0:1.2.41-2.redhat_4.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_ldap | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_ldap22 | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | mod_ssl | 1:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | mod_ssl22 | 1:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | tomcat-native | 0:1.1.34-5.redhat_1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | tomcat-native | 0:1.1.34-5.redhat_1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | tomcat-native-debuginfo | 0:1.1.34-5.redhat_1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | tomcat-native-debuginfo | 0:1.1.34-5.redhat_1.ep6.el7 |
| Red Hat jboss enterprise web server 2 | httpd | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise web server 2 | httpd-debuginfo | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise web server 2 | httpd-devel | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise web server 2 | httpd-manual | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise web server 2 | httpd-tools | 0:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise web server 2 | httpd22 | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise web server 2 | httpd22-debuginfo | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise web server 2 | httpd22-devel | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise web server 2 | httpd22-manual | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise web server 2 | httpd22-tools | 0:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24 | 0:1-3.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24 | 0:1-3.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-debuginfo | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-debuginfo | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-devel | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-devel | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-libs | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-libs | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-perl | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-perl | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-static | 1:1.0.2h-4.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-openssl-static | 1:1.0.2h-4.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-runtime | 0:1-3.jbcs.el6 |
| Red Hat jboss enterprise web server 2 | jbcs-httpd24-runtime | 0:1-3.jbcs.el7 |
| Red Hat jboss enterprise web server 2 | mod_cluster | 0:1.2.13-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_cluster | 0:1.2.13-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_cluster-native | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_cluster-native | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_cluster-native-debuginfo | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_cluster-native-debuginfo | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_cluster-tomcat6 | 0:1.2.13-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_cluster-tomcat6 | 0:1.2.13-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_cluster-tomcat7 | 0:1.2.13-1.Final_redhat_1.1.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_cluster-tomcat7 | 0:1.2.13-1.Final_redhat_1.1.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_jk | 0:1.2.41-2.redhat_3.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_jk | 0:1.2.41-2.redhat_3.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_jk-ap22 | 0:1.2.41-2.redhat_3.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_jk-ap22 | 0:1.2.41-2.redhat_3.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_jk-debuginfo | 0:1.2.41-2.redhat_3.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_jk-debuginfo | 0:1.2.41-2.redhat_3.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_jk-manual | 0:1.2.41-2.redhat_3.ep6.el7 |
| Red Hat jboss enterprise web server 2 | mod_jk-manual | 0:1.2.41-2.redhat_3.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_ssl | 1:2.2.26-54.ep6.el6 |
| Red Hat jboss enterprise web server 2 | mod_ssl22 | 1:2.2.26-56.ep6.el7 |
| Red Hat jboss enterprise web server 2 | tomcat-native | 0:1.1.34-5.redhat_1.ep6.el7 |
| Red Hat jboss enterprise web server 2 | tomcat-native | 0:1.1.34-5.redhat_1.ep6.el6 |
| Red Hat jboss enterprise web server 2 | tomcat-native-debuginfo | 0:1.1.34-5.redhat_1.ep6.el7 |
| Red Hat jboss enterprise web server 2 | tomcat-native-debuginfo | 0:1.1.34-5.redhat_1.ep6.el6 |