Published: 11/03/2022 Updated: 18/03/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat descision manager 7.0
redhat jboss enterprise application platform 7.0.0
redhat jboss enterprise application platform expansion pack -
redhat process automation 7.0
redhat single sign-on 7.0

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 745 security update Type/Severity Security Advisory: Moderate Topic A security update is now available for Red Hat JBoss Enterprise Application Platform 74Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring S ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 745 security update on RHEL 8 Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic A security update is now available for Red Hat JBoss Enterprise Application P ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 745 security update on RHEL 7 Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic A security update is now available for Red Hat JBoss Enterprise Application P ...

CVE-2022-0853 CVE-2022-0853 A memory leak on the jboss client side, when using UserTransaction repeatedly Such as: private void testTransaction() throws Exception { for(int i=1; i< 500000; i++) { Systemoutprintln("Starting process " + i); // get the UserTransaction and EJB Proxy Context ctx = getInitialContext(host, port, username, password);

CWE-401 https://bugzilla.redhat.com/show_bug.cgi?id=2060725 https://github.com/ByteHackr/CVE-2022-0853 https://access.redhat.com/errata/RHSA-2022:4922 https://nvd.nist.gov

CVE-2022-0853

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect