RHSA-2021:0491LowCVSS 5.9

Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update

Published
February 11, 2021
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-1971 →

📋 Description

CVE-2020-1971 — openssl: EDIPARTYNAME NULL pointer de-reference

🎯 Affected products1

  • Red Hat JBoss Web Server 3.1

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update. Workaround: Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.

🔗 References (4)