PT-2016-6835 · Red Hat+2 · Resteasy+2

Mikhail Egorov + 1 · Publicado 2016-09-07 · Atualizado 2025-07-10 · CVE-2016-6346

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RESTEasy (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service via unspecified vectors, due to the GZIPInterceptor being enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2016-6346

GHSA-WXVR-VQFP-9CQW

RHSA-2017:0826

RHSA-2017:0827

RHSA-2017:0828

RHSA-2017:0829

RHSA-2018:0002

RHSA-2018:0004

RHSA-2018:0005

RHSA-2019:1222

USN-7630-1

Produtos afetados

Linuxmint

Resteasy

Ubuntu

Referências · 38

• https://github.com/resteasy/Resteasy · Nota
• https://github.com/resteasy/resteasy/pull/1303 · Nota
• http://rhn.redhat.com/errata/RHSA-2017-0517.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2021-20289 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2017-0826.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2017-0829.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:0003 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1372120 · Nota
• https://osv.dev/vulnerability/GHSA-wxvr-vqfp-9cqw · Aviso do Fabricante
• http://securityfocus.com/bid/92744 · Nota
• https://ubuntu.com/security/CVE-2016-6346 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-6346 · Nota de Segurança
• https://ubuntu.com/security/CVE-2020-25633 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2020-1695 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6346 · Aviso do Fabricante