CVE-2020-14384
Fixed in a distro release EPSS 1%
A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.
Products: redhat jboss_enterprise_application_platform, redhat jbossweb
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 6 | jboss-as-appclient | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-appclient | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cli | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cli | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-client-all | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-client-all | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-clustering | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-clustering | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cmp | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-cmp | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-configadmin | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-configadmin | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-connector | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-connector | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller-client | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-controller-client | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-core-security | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-core-security | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-repository | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-repository | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-scanner | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-deployment-scanner | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-http | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-http | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-management | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-domain-management | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee-deployment | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ee-deployment | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ejb3 | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-ejb3 | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-embedded | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-embedded | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-host-controller | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-host-controller | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jacorb | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jacorb | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxr | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxr | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxrs | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jaxrs | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jdr | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jdr | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jmx | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jmx | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jpa | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jpa | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsf | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsf | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsr77 | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-jsr77 | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-logging | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-logging | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-mail | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-mail | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-management-client-content | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-management-client-content | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-messaging | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-messaging | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-modcluster | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-modcluster | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-naming | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-naming | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-network | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-network | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-configadmin | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-configadmin | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-service | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-osgi-service | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-picketlink | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-picketlink | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-platform-mbean | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-platform-mbean | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-pojo | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-pojo | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-process-controller | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-process-controller | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-protocol | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-protocol | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-remoting | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-remoting | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-sar | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-sar | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-security | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-security | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-server | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-server | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-system-jmx | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-system-jmx | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-threads | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-threads | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-transactions | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-transactions | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-version | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-version | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-web | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-webservices | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-webservices | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-weld | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jboss-as-weld | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-xts | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jboss-as-xts | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-appclient | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-appclient | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-bundles | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-bundles | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-core | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-core | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-domain | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-domain | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-javadocs | 0:7.5.24-1.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-javadocs | 0:7.5.24-1.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-modules-eap | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-modules-eap | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-product-eap | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-product-eap | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-standalone | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-standalone | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossas-welcome-content-eap | 0:7.5.24-2.Final_redhat_00001.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossas-welcome-content-eap | 0:7.5.24-2.Final_redhat_00001.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossts | 1:4.17.45-2.Final_redhat_2.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossts | 1:4.17.45-2.Final_redhat_2.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.31-3.Final_redhat_3.1.ep6.el7 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.32-2.Final_redhat_1.2.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.31-3.Final_redhat_3.1.ep6.el6 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.31-3.Final_redhat_3.1.ep6.el5 |
| Red Hat jboss enterprise application platform 6 | jbossweb | 0:7.5.32-2.Final_redhat_1.2.ep6.el7 |