CVE-2016-7046

Published: Oct 3, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

Affected (1)

Products: Redhat: Jboss Enterprise Application Platform

Redhat

1 product

Jboss Enterprise Application Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 7.0

Related CWEs

CWE-399

References (20)

http://rhn.redhat.com/errata/RHSA-2016-2640.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-2641.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-2642.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-2657.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/93173

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:3454

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2017:3455

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2017:3456

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2017:3458

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1376646

Source: cve@mitre.org

Issue Tracking

http://rhn.redhat.com/errata/RHSA-2016-2640.html