Lucene search
ApacheCVELIST:CVE-2019-17571HistoryDec 20, 2019 - 4:01 p.m.
CVE-2019-17571
2019-12-2016:01:21
CWE-502
apache
raw.githubusercontent.com
1
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
Related
f5
f5
K61529042 : Log4j vulnerability CVE-2019-17571
2020-04-08 00:00:00
ibm
ibm
osv
osv
apache-log4j1.2 - security update
2020-01-12 00:00:00
CVE-2019-17571
2019-12-20 17:15:11
Deserialization of Untrusted Data in Log4j
2020-01-06 18:43:49
debiancve
debiancve
CVE-2019-17571
2019-12-20 17:15:00
veracode
veracode
Arbitrary Code Execution
2019-12-23 04:57:47
Remote Code Execution (RCE)
2017-04-18 01:36:45
checkpoint_advisories
checkpoint_advisories
Apache Log4j Remote Code Execution (CVE-2019-17571)
2020-03-01 00:00:00
debian
debian
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:02
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:02
[SECURITY] [DLA 2065-1] apache-log4j1.2 security update
2020-01-12 22:27:35
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0053-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for log4j (openSUSE-SU-2020:0051_1)
2020-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0054-1)
2021-04-19 00:00:00
cve
cve
CVE-2019-17571
2019-12-20 17:15:00
atlassian
atlassian
ubuntu
ubuntu
Apache Log4j vulnerability
2020-09-15 00:00:00
Apache Log4j vulnerabilities
2023-04-05 00:00:00
nessus
nessus
Ubuntu 18.04 LTS : Apache Log4j vulnerability (USN-4495-1)
2020-09-15 00:00:00
Debian DLA-2065-1 : apache-log4j1.2 security update
2020-01-13 00:00:00
openSUSE Security Update : log4j (openSUSE-2020-51)
2020-01-15 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2019-17571 in log4j
2022-06-21 20:23:31
redhat
redhat
(RHSA-2022:5053) Important: log4j security update
2022-06-15 10:01:13
(RHSA-2017:3399) Important: Red Hat JBoss Enterprise Application Platform 5.2 security update
2017-12-07 17:04:23
(RHSA-2017:2423) Important: log4j security update
2017-08-07 07:26:13
github
github
Deserialization of Untrusted Data in Log4j
2020-01-06 18:43:49
suse
suse
Security update for log4j (important)
2020-01-14 00:00:00
symantec
symantec
prion
prion
Deserialization of untrusted data
2019-12-20 17:15:00
ubuntucve
ubuntucve
CVE-2019-17571
2019-12-20 00:00:00
redhatcve
redhatcve
CVE-2017-5645
2019-10-10 10:12:57
CVE-2019-17571
2020-04-05 23:06:12
rosalinux
rosalinux
Advisory ROSA-SA-2021-1909
2021-07-02 17:26:24
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 19:14:23
Exploit for Deserialization of Untrusted Data in Apache Log4J
2019-12-25 16:46:11
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 07:48:49
centos
centos
log4j security update
2017-08-31 18:57:53
attackerkb
attackerkb
CVE-2019-17571
2019-12-20 00:00:00
amazon
amazon
Important: log4j
2022-01-18 20:15:00
Medium: log4j
2022-01-18 21:37:00
gentoo
gentoo
Apache Log4j: Multiple Vulnerabilities
2024-02-18 00:00:00
mageia
mageia
Updated davmail packages fix security vulnerability
2023-04-15 22:03:44
cert
cert
Apache Log4j allows insecure JNDI lookups
2021-12-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00