{"id":"CVE-2016-6346","aliases":["GHSA-wxvr-vqfp-9cqw"],"url":"https://o3.security/vulnerability/CVE-2016-6346","summary":"Denial of service in JBoss resteasy","details":"RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.","published":"2016-09-07T18:59:03.437Z","modified":"2026-03-15T21:51:07.169005Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.jboss.resteasy:resteasy-jaxrs","fixedVersion":"3.0.20.Final"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0002"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0004"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2017-0827.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/92744"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1676"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0005"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1222"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2017-0826.html"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2017-0828.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0003"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:2143"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2017-0517.html"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2017-0829.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1675"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372120"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-03-15T21:51:07.169005Z"}}