Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/eap7-log4j-jboss-logmanager@1.3.1-1.Final_redhat_00002.1?arch=el8eap
purl pkg:rpm/redhat/eap7-log4j-jboss-logmanager@1.3.1-1.Final_redhat_00002.1?arch=el8eap
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2e6w-fs4j-17g9
Aliases:
CVE-2024-27316
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion. There are no reported fixed by versions.
VCID-d5x5-hcjh-efcr
Aliases:
CVE-2024-30172
GHSA-m44j-cfrm-g8qc
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:48:35.194746+00:00 RedHat Importer Affected by VCID-2e6w-fs4j-17g9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-27316.json 38.0.0
2026-04-01T13:47:47.543680+00:00 RedHat Importer Affected by VCID-d5x5-hcjh-efcr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30172.json 38.0.0