Is there a patch the hashmap denail of service vulnerability for JBoss EAP?

[sairamnadh]

I would like to know if there is a patch for the hash map DoS Vulnerability as Microsoft released a patch. How can we verify if our system is vulnarabile or not?

Related to the CVE-2011-4838

Tracking IDs: oCERT-2011-003

[jaikiran]

Since you are using JBoss EAP, you are entitled to the security and other patches. Please contact the support team via the supportal portal using your EAP account.

[kosmaj]

Hi Jaikiran

Is the patch already available to EAP members?

What about non-EAP ppl?

Thanks.

[ozizka]

IMO:

This needs to be primarily targetted in JDK.

Until then, all public-facing hashmap keys may be adjusted using a secret, e.g. adding a salt to a string...

[jaikiran]

Predrag Minovic wrote:

Is the patch already available to EAP members?

You should check via the support portal (if you are a EAP customer). I don't usually keep track of the EAP patches, so I don't have a clue.