| Package | Affected versions | Patched versions |
|---|---|---|
| jboss communications platform | ≤ 5.1 | |
| jboss enterprise application platform | ≤ 5.1.2 | |
| jboss enterprise brms platform | ≤ 5.1.0 | |
| jboss enterprise web platform | ≤ 5.1.2 |
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free