RHSA-2020:5170MediumCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Web Server 5.4 security release

Published
November 23, 2020
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-11996 →

📋 Description

CVE-2020-11996 — tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS

🎯 Affected products62

  • Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-jboss-logging-0:3.4.1-1.Final_redhat_00001.1.el6jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-jboss-logging-0:3.4.1-1.Final_redhat_00001.1.el6jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-jboss-logging-0:3.4.1-1.Final_redhat_00001.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-jboss-logging-0:3.4.1-1.Final_redhat_00001.1.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-jboss-logging-0:3.4.1-1.Final_redhat_00001.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-jboss-logging-0:3.4.1-1.Final_redhat_00001.1.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-mod_cluster-0:1.4.2-7.Final_redhat_00002.2.el6jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-mod_cluster-0:1.4.2-7.Final_redhat_00002.2.el6jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-mod_cluster-0:1.4.2-7.Final_redhat_00002.2.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-mod_cluster-0:1.4.2-7.Final_redhat_00002.2.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-mod_cluster-0:1.4.2-7.Final_redhat_00002.2.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-mod_cluster-0:1.4.2-7.Final_redhat_00002.2.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-mod_cluster-tomcat-0:1.4.2-7.Final_redhat_00002.2.el6jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-mod_cluster-tomcat-0:1.4.2-7.Final_redhat_00002.2.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-mod_cluster-tomcat-0:1.4.2-7.Final_redhat_00002.2.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-tomcat-0:9.0.36-6.redhat_5.2.el6jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-tomcat-0:9.0.36-6.redhat_5.2.el6jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-tomcat-0:9.0.36-6.redhat_5.2.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-tomcat-0:9.0.36-6.redhat_5.2.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-tomcat-0:9.0.36-6.redhat_5.2.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-tomcat-0:9.0.36-6.redhat_5.2.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-tomcat-admin-webapps-0:9.0.36-6.redhat_5.2.el6jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-tomcat-admin-webapps-0:9.0.36-6.redhat_5.2.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-tomcat-admin-webapps-0:9.0.36-6.redhat_5.2.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • jws5-tomcat-docs-webapp-0:9.0.36-6.redhat_5.2.el6jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 6 Server
  • jws5-tomcat-docs-webapp-0:9.0.36-6.redhat_5.2.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server
  • jws5-tomcat-docs-webapp-0:9.0.36-6.redhat_5.2.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8
  • +32 more not shown

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

🔗 References (6)