title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update
description: undertow: buffer leak on incoming websocket PONG message may lead to DoS undertow: client side invocation timeout raised when calling over HTTP2 jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck xml-security: XPath Transform abuse allows for information disclosure xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr undertow: Double AJP response for 400 from EAP 7 results in CPING failures undertow: Large AJP request may cause DoS artemis-commons: Apache ActiveMQ Artemis DoS Moment.js: Path traversal  in moment.locale com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson snakeyaml: Denial of Service due to missing nested depth limitation for collections jettison: parser crash by stackoverflow woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks Undertow: Infinite loop in SslConduit during close undertow: unrestricted request storage leads to memory exhaustion undertow: OutOfMemoryError due to @MultipartConfig handling undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol
cpes: cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7