7.5

CVE-2026-15562

Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4.25
Default Statusunaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.16.0-22.redhat_00057.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.3.14-11.SP11_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:1.5.26-2.Final_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.18.8-1.redhat_00003.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.18.8-1.redhat_00003.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.18.8-1.redhat_00003.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.18.8-1.redhat_00003.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.18.8-1.redhat_00003.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.18.8-1.redhat_00003.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:5.0.31-3.SP2_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:1.10.0-46.Final_redhat_00044.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:4.1.135-1.Final_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:4.1.135-1.Final_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.5.5-30.SP12_redhat_00020.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.5.5-24.SP12_redhat_00016.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:2.2.40-2.SP3_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version 0:7.4.25-2.GA_redhat_00001.1.el7eap
Version < *
Status unaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 7
Default Statusaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform 8
Default Statusaffected
HerstellerRed Hat
Produkt Red Hat JBoss Enterprise Application Platform Expansion Pack
Default Statusunaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.365
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://access.redhat.com/security/cve/CVE-2026-15562
https://bugzilla.redhat.com/show_bug.cgi?id=2483135
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53806