CVE-2022-0853

Published: 11/03/2022 Updated: 18/03/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss enterprise application platform 7.0.0
redhat single sign-on 7.0
redhat process automation 7.0
redhat descision manager 7.0
redhat jboss enterprise application platform expansion pack -

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 745 security update Type/Severity Security Advisory: Moderate Topic A security update is now available for Red Hat JBoss Enterprise Application Platform 74Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring S ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 745 security update on RHEL 8 Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic A security update is now available for Red Hat JBoss Enterprise Application P ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform 745 security update on RHEL 7 Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic A security update is now available for Red Hat JBoss Enterprise Application P ...

CVE-2022-0853 CVE-2022-0853 A memory leak on the jboss client side, when using UserTransaction repeatedly Such as: private void testTransaction() throws Exception { for(int i=1; i< 500000; i++) { Systemoutprintln("Starting process " + i); // get the UserTransaction and EJB Proxy Context ctx = getInitialContext(host, port, username, password);

CWE-401 https://bugzilla.redhat.com/show_bug.cgi?id=2060725 https://github.com/ByteHackr/CVE-2022-0853 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2022:4922

CVE-2022-0853

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect