{"url":"http://public2.vulnerablecode.io/api/packages/209118?format=json","purl":"pkg:rpm/redhat/eap7-resteasy@3.0.19-3.SP1_redhat_1.1.ep7?arch=el7","type":"rpm","namespace":"redhat","name":"eap7-resteasy","version":"3.0.19-3.SP1_redhat_1.1.ep7","qualifiers":{"arch":"el7"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/56841?format=json","vulnerability_id":"VCID-1bhb-gpkb-bfa5","summary":"Red Hat Wildfly DoS\nUndertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to \"max-headers\" (default 200) * \"max-header-size\" (default 1MB) per active TCP connection.","references":[{"reference_url":"http://rhn.redhat.com/errata/RHSA-2017-0830.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2017-0830.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2017-0831.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2017-0831.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2017-0832.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2017-0832.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2017-0834.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2017-0834.html"},{"reference_url":"http://rhn.redhat.com/errata/RHSA-2017-0876.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://rhn.redhat.com/errata/RHSA-2017-0876.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0872","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:0872"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0873","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:0873"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:3454","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:3454"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:3455","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:3455"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:3456","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:3456"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:3458","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2017:3458"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9589.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9589.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9589","reference_id":"","reference_type":"","scores":[{"value":"0.02193","scoring_system":"epss","scoring_elements":"0.84668","published_at":"2026-05-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9589"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404782","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404782"},{"reference_url":"https://github.com/wildfly/wildfly","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/wildfly/wildfly"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9589","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9589"},{"reference_url":"https://web.archive.org/web/20200227180917/https://www.securityfocus.com/bid/97060","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200227180917/https://www.securityfocus.com/bid/97060"},{"reference_url":"https://web.archive.org/web/20200227180917/https://www.securityfocus.com/bid/97060/","reference_id":"","reference_type":"","scores":[],"url":"https://web.archive.org/web/20200227180917/https://www.securityfocus.com/bid/97060/"},{"reference_url":"http://www.securityfocus.com/bid/97060","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/97060"},{"reference_url":"https://github.com/advisories/GHSA-p4xg-cpr9-vwvj","reference_id":"GHSA-p4xg-cpr9-vwvj","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-p4xg-cpr9-vwvj"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0830","reference_id":"RHSA-2017:0830","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0830"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0831","reference_id":"RHSA-2017:0831","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0831"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0832","reference_id":"RHSA-2017:0832","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0832"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0834","reference_id":"RHSA-2017:0834","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0834"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0876","reference_id":"RHSA-2017:0876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0876"}],"fixed_packages":[],"aliases":["CVE-2016-9589","GHSA-p4xg-cpr9-vwvj"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1bhb-gpkb-bfa5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/64766?format=json","vulnerability_id":"VCID-nbqb-aexa-dua8","summary":"jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json","reference_id":"","reference_type":"","scores":[{"value":"7.0","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8656","reference_id":"","reference_type":"","scores":[{"value":"0.00071","scoring_system":"epss","scoring_elements":"0.21782","published_at":"2026-05-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8656"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400344","reference_id":"1400344","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400344"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0244","reference_id":"RHSA-2017:0244","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0244"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0245","reference_id":"RHSA-2017:0245","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0245"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0246","reference_id":"RHSA-2017:0246","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0246"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0250","reference_id":"RHSA-2017:0250","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0250"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0831","reference_id":"RHSA-2017:0831","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0831"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0832","reference_id":"RHSA-2017:0832","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0832"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0834","reference_id":"RHSA-2017:0834","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0834"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:1609","reference_id":"RHSA-2018:1609","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:1609"}],"fixed_packages":[],"aliases":["CVE-2016-8656"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nbqb-aexa-dua8"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-resteasy@3.0.19-3.SP1_redhat_1.1.ep7%3Farch=el7"}