Back

HIGH

RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack

Published Sep 7, 2016

Description

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

Affected products

Remediation

Red Hat statement

This issue was fixed in EAP 7.1.0, but was not fixed in 7.0.7 On Red Hat Satellite 6.5 this issue is fixed through the candlepin package update (candlepin 2.5.8), which contains a non-vulnerable version of RESTEasy.

Metrics

Weaknesses (0)

No CWE recorded.

References (21)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Sep 7, 2016
Updated Aug 6, 2024
Reserved Jul 26, 2016
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Sep 1, 2016
GHSA-WXVR-VQFP-9CQW