CVE-2022-0853
Fixed in a distro release EPSS 1%
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.
Products: redhat descision_manager, redhat jboss_enterprise_application_platform, redhat jboss_enterprise_application_platform_expansion_pack, redhat process_automation, redhat single_sign-on
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-cli | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-cli | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-commons | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-commons | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-core-client | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-core-client | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-dto | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-dto | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hornetq-protocol | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hornetq-protocol | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hqclient-protocol | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hqclient-protocol | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jdbc-store | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jdbc-store | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-client | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-client | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-server | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-server | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-journal | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-journal | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-ra | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-ra | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-selector | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-selector | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-server | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-server | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-service-extensions | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-service-extensions | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-tools | 0:2.16.0-9.redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-tools | 0:2.16.0-9.redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-h2database | 0:1.4.197-2.redhat_00004.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-h2database | 0:1.4.197-2.redhat_00004.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hal-console | 0:3.3.12-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hal-console | 0:3.3.12-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jackson-databind | 0:2.12.6.1-1.redhat_00003.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jackson-databind | 0:2.12.6.1-1.redhat_00003.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-xnio-base | 0:3.8.7-1.SP1_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-xnio-base | 0:3.8.7-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-all | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-all | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-buffer | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-buffer | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-dns | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-dns | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-haproxy | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-haproxy | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-http | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-http | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-http2 | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-http2 | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-memcache | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-memcache | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-mqtt | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-mqtt | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-redis | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-redis | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-smtp | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-smtp | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-socks | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-socks | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-stomp | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-stomp | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-xml | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-codec-xml | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-common | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-common | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-handler | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-handler | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-handler-proxy | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-handler-proxy | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-resolver | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-resolver | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-resolver-dns | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-resolver-dns | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-resolver-dns-classes-macos | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-resolver-dns-classes-macos | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-classes-epoll | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-classes-epoll | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-classes-kqueue | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-classes-kqueue | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-native-unix-common | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-native-unix-common | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-rxtx | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-rxtx | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-sctp | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-sctp | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-udt | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-netty-transport-udt | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.17-2.SP4_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.17-2.SP4_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly | 0:7.4.5-3.GA_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-client | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-client | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-client-common | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-client-common | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-ejb-client | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-ejb-client | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-naming-client | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-naming-client | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-transaction-client | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-http-transaction-client | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk11 | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk8 | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-javadocs | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-javadocs | 0:7.4.5-3.GA_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-modules | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-modules | 0:7.4.5-3.GA_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-xerces-j2 | 0:2.12.0-3.SP04_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-xerces-j2 | 0:2.12.0-3.SP04_redhat_00001.1.el8eap |
| Red Hat red hat single sign on 7.6 | rh-sso7 | 0:1-5.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-javapackages-filesystem | 0:6.0.0-7.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-javapackages-tools | 0:6.0.0-7.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak | 0:18.0.3-1.redhat_00001.1.el8sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak | 0:18.0.3-1.redhat_00001.1.el7sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak | 0:18.0.3-1.redhat_00001.1.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak-server | 0:18.0.3-1.redhat_00001.1.el8sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak-server | 0:18.0.3-1.redhat_00001.1.el7sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak-server | 0:18.0.3-1.redhat_00001.1.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-python3-javapackages | 0:6.0.0-7.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-runtime | 0:1-5.el9sso |