🛡️ RHSA-2014:0170 — hornetq

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update

Affected software

RHSA-2014:0170 is recorded against 67 packages.

hornetq (fixed in 0:2.3.14-1.Final_redhat_1.1.ep6.el5)
jacorb-jboss (fixed in 0:2.3.2-13.redhat_6.1.ep6.el5)
jboss-as-appclient (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-cli (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-client-all (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-clustering (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-cmp (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-configadmin (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-connector (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-controller (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-controller-client (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-core-security (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-deployment-repository (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-deployment-scanner (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-domain-http (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-domain-management (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-ee (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-ee-deployment (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-ejb3 (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-embedded (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-host-controller (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-jacorb (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-jaxr (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-jaxrs (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)

Show the remaining 43 packages

jboss-as-jdr (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-jmx (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-jpa (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-jsf (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-jsr77 (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-logging (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-mail (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-management-client-content (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-messaging (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-modcluster (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-naming (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-network (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-osgi (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-osgi-configadmin (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-osgi-service (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-platform-mbean (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-pojo (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-process-controller (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-protocol (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-remoting (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-sar (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-security (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-server (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-system-jmx (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-threads (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-transactions (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-as-version (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-web (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-webservices (fixed in 0:7.3.1-3.Final_redhat_3.1.ep6.el5)
jboss-as-weld (fixed in 0:7.3.1-4.Final_redhat_3.1.ep6.el5)
jboss-as-xts (fixed in 0:7.3.1-2.Final_redhat_3.1.ep6.el5)
jboss-logmanager (fixed in 0:1.5.2-1.Final_redhat_1.1.ep6.el5)
jboss-marshalling (fixed in 0:1.4.3-1.Final_redhat_1.1.ep6.el5)
jboss-xnio-base (fixed in 0:3.0.9-1.GA_redhat_1.1.ep6.el5)
jbossas-core (fixed in 0:7.3.1-5.Final_redhat_3.1.ep6.el5)
jbossas-javadocs (fixed in 0:7.3.1-3.Final_redhat_3.ep6.el5)
jbossas-modules-eap (fixed in 0:7.3.1-6.Final_redhat_3.1.ep6.el5)
jbossweb (fixed in 0:7.3.0-1.Final_redhat_1.1.ep6.el5)
netty (fixed in 0:3.6.7-1.Final_redhat_1.1.ep6.el5)
picketbox (fixed in 0:4.0.19-2.SP3_redhat_1.1.ep6.el5)
weld-core (fixed in 0:1.1.17-1.Final_redhat_1.1.ep6.el5)
xml-security (fixed in 0:1.5.6-1.redhat_1.1.ep6.el5)
xmltooling (fixed in 0:1.3.4-5.redhat_3.1.ep6.el5)

Timeline and source

Published on 29 September 2024 and last revised on 5 August 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

access.redhat.com (Advisory)
access.redhat.com (Article)
access.redhat.com (Article)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)
bugzilla.redhat.com (Report)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2024-09-29

Updated 2026-08-11

Modified 2026-08-05

Fix URL N/A

Affected Packages

Software	From version	Fixed in
hornetq	—	0:2.3.14-1.Final_redhat_1.1.ep6.el5
jacorb-jboss	—	0:2.3.2-13.redhat_6.1.ep6.el5
jboss-as-appclient	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-cli	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-client-all	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-clustering	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-cmp	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-configadmin	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-connector	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-controller	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-controller-client	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-core-security	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-deployment-repository	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-deployment-scanner	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-domain-http	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-domain-management	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-ee	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-ee-deployment	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-ejb3	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-embedded	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-host-controller	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jacorb	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jaxr	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jaxrs	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jdr	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jmx	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jpa	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jsf	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jsr77	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-logging	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-mail	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-management-client-content	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-messaging	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-modcluster	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-naming	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-network	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-osgi	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-osgi-configadmin	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-osgi-service	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-platform-mbean	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-pojo	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-process-controller	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-protocol	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-remoting	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-sar	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-security	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-server	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-system-jmx	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-threads	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-transactions	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-version	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-web	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-webservices	—	0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-weld	—	0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-xts	—	0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-logmanager	—	0:1.5.2-1.Final_redhat_1.1.ep6.el5
jboss-marshalling	—	0:1.4.3-1.Final_redhat_1.1.ep6.el5
jboss-xnio-base	—	0:3.0.9-1.GA_redhat_1.1.ep6.el5
jbossas-core	—	0:7.3.1-5.Final_redhat_3.1.ep6.el5
jbossas-javadocs	—	0:7.3.1-3.Final_redhat_3.ep6.el5
jbossas-modules-eap	—	0:7.3.1-6.Final_redhat_3.1.ep6.el5
jbossweb	—	0:7.3.0-1.Final_redhat_1.1.ep6.el5
netty	—	0:3.6.7-1.Final_redhat_1.1.ep6.el5
picketbox	—	0:4.0.19-2.SP3_redhat_1.1.ep6.el5
weld-core	—	0:1.1.17-1.Final_redhat_1.1.ep6.el5
xml-security	—	0:1.5.6-1.redhat_1.1.ep6.el5
xmltooling	—	0:1.3.4-5.redhat_3.1.ep6.el5

References

ADVISORY https://access.redhat.com/errata/RHSA-2014:0170

ARTICLE https://access.redhat.com/security/updates/classification/#moderate

ARTICLE https://access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Application_Platform/6.2/html/6.2.1_Release_Notes/index.html

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1038643

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1043332

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1045257

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1052718

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1052783

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1052989

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1053216

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1053218

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1053224

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1053229

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1053231

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1053779

ADVISORY https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0170.json

REPORT https://access.redhat.com/security/cve/CVE-2013-4517

ADVISORY https://www.cve.org/CVERecord?id=CVE-2013-4517

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2013-4517

REPORT https://access.redhat.com/security/cve/CVE-2013-6440

ADVISORY https://www.cve.org/CVERecord?id=CVE-2013-6440

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2013-6440

ARTICLE http://blog.sendsafely.com/post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml

REPORT https://access.redhat.com/security/cve/CVE-2014-0018

ADVISORY https://www.cve.org/CVERecord?id=CVE-2014-0018

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2014-0018

🔗 NVD 🔗 Mitre

Similar Threats

More RHSA 2014 advisories

Browse all of RHSA 2014 in the advisory index.

Free Vulnerability Check

Is your site affected by RHSA-2014:0170?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against RHSA-2014:0170 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ RHSA-2014:0170 — hornetq

Description

Affected software

Timeline and source

References

More RHSA 2014 advisories

Is your site affected by RHSA-2014:0170?

Company

Resources

Services

Trusted

Subscribe