PT-2016-6835 · Red Hat+2 · Resteasy+2

Mikhail Egorov + 1 · Published 2016-09-07 · Updated 2025-07-10 · CVE-2016-6346

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RESTEasy (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service via unspecified vectors, due to the GZIPInterceptor being enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-6346

GHSA-WXVR-VQFP-9CQW

RHSA-2017:0826

RHSA-2017:0827

RHSA-2017:0828

RHSA-2017:0829

RHSA-2018:0002

RHSA-2018:0004

RHSA-2018:0005

RHSA-2019:1222

USN-7630-1

Affected Products

Linuxmint

Resteasy

Ubuntu

References · 38

• http://rhn.redhat.com/errata/RHSA-2017-0517.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20289 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0826.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0829.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0003 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wxvr-vqfp-9cqw · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6346 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-6346 · Security Note
• https://ubuntu.com/security/CVE-2020-25633 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-1695 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6346 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6346 · Security Note
• https://access.redhat.com/errata/RHSA-2019:1222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6345 · Vendor Advisory