Lucene search
RedHatRHSA-2021:5206HistoryDec 20, 2021 - 8:38 a.m.
(RHSA-2021:5206) Moderate: log4j security update
2021-12-2008:38:19
access.redhat.com
79
0.127 Low
EPSS
Percentile
95.5%
Log4j is a tool to help the programmer output log statements to a variety of output targets.
Security Fix(es):
- log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender (CVE-2021-4104)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | s390x | log4j-manual | < 1.2.14-6.5.el6_10 | log4j-manual-1.2.14-6.5.el6_10.s390x.rpm |
| RedHat | 6 | i686 | log4j-debuginfo | < 1.2.14-6.5.el6_10 | log4j-debuginfo-1.2.14-6.5.el6_10.i686.rpm |
| RedHat | 6 | i686 | log4j-javadoc | < 1.2.14-6.5.el6_10 | log4j-javadoc-1.2.14-6.5.el6_10.i686.rpm |
| RedHat | 6 | x86_64 | log4j | < 1.2.14-6.5.el6_10 | log4j-1.2.14-6.5.el6_10.x86_64.rpm |
| RedHat | 7 | noarch | log4j-manual | < 1.2.17-17.el7_4 | log4j-manual-1.2.17-17.el7_4.noarch.rpm |
| RedHat | 6 | x86_64 | log4j-javadoc | < 1.2.14-6.5.el6_10 | log4j-javadoc-1.2.14-6.5.el6_10.x86_64.rpm |
| RedHat | 6 | s390x | log4j-debuginfo | < 1.2.14-6.5.el6_10 | log4j-debuginfo-1.2.14-6.5.el6_10.s390x.rpm |
| RedHat | 7 | noarch | log4j | < 1.2.17-17.el7_4 | log4j-1.2.17-17.el7_4.noarch.rpm |
| RedHat | 7 | noarch | log4j-javadoc | < 1.2.17-17.el7_4 | log4j-javadoc-1.2.17-17.el7_4.noarch.rpm |
| RedHat | 7 | noarch | log4j-javadoc | < 1.2.17-16.el7_3 | log4j-javadoc-1.2.17-16.el7_3.noarch.rpm |
Related
ibm
ibm
Security Bulletin: IBM Security Access Manager has fixed a vulnerability in the log4j library shipped with the product. (CVE-2021-4104)
2022-01-04 17:37:39
suse
suse
Security update for log4j12 (important)
2021-12-17 00:00:00
Security update for kafka (important)
2021-12-28 00:00:00
Security update for log4j12 (important)
2021-12-24 00:00:00
nessus
nessus
CentOS 7 : log4j (CESA-2021:5206)
2021-12-21 00:00:00
RHEL 7 : rh-maven36-log4j12 (RHSA-2021:5269)
2021-12-23 00:00:00
ubuntu
ubuntu
Apache Log4j 1.2 vulnerability
2022-02-08 00:00:00
Apache Log4j 1.2 vulnerability
2022-01-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:14866-1)
2021-12-18 00:00:00
CentOS: Security Advisory for log4j (CESA-2021:5206)
2022-01-11 00:00:00
openSUSE: Security Advisory for log4j12 (openSUSE-SU-2021:1612-1)
2022-02-01 00:00:00
oraclelinux
oraclelinux
log4j security update
2021-12-21 00:00:00
log4j security update
2022-01-26 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-4104
2022-01-17 14:23:20
github
github
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
2021-12-17 20:42:38
Deserialization of Untrusted Data in Log4j 1.x
2022-01-21 23:27:14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
2021-12-14 19:49:31
gentoo
gentoo
Arduino: Remote Code Execution
2023-12-22 00:00:00
Minecraft Server: Remote Code Execution
2023-12-20 00:00:00
Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
osv
osv
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
2021-12-17 20:42:38
apache-log4j1.2 vulnerability
2022-02-08 21:01:33
apache-log4j1.2 vulnerability
2022-01-12 19:31:51
centos
centos
log4j security update
2021-12-21 21:36:17
redhat
redhat
(RHSA-2021:5269) Moderate: rh-maven36-log4j12 security update
2021-12-22 21:14:37
kaspersky
kaspersky
KLA12407 RCE vulnerability in Apache Log4j
2021-12-14 00:00:00
cnvd
cnvd
Apache Log4j Code Execution Vulnerability
2021-12-16 00:00:00
cvelist
cvelist
debiancve
debiancve
CVE-2021-4104
2021-12-14 12:15:12
CVE-2022-23302
2022-01-18 16:15:08
atlassian
atlassian
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-01-14 13:13:21
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-03-07 08:14:14
redhatcve
redhatcve
CVE-2021-4104
2022-05-07 14:29:21
CVE-2021-44228
2022-05-07 14:19:14
nvd
nvd
CVE-2021-4104
2021-12-14 12:15:12
CVE-2022-23302
2022-01-18 16:15:08
f5
f5
K59563964 : Apache Log4j Remote Code Execution vulnerability CVE-2022-23302
2022-01-31 00:00:00
K24554520 : Apache Log4j Remote Code Execution vulnerability CVE-2021-4104
2021-12-15 00:00:00
cve
cve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2021-4104
2021-12-14 12:15:12
veracode
veracode
Deserialisation Of Untrusted Object
2021-12-15 13:38:24
ubuntucve
ubuntucve
prion
prion
Deserialization of untrusted data
2021-12-14 12:15:00
Deserialization of untrusted data
2022-01-18 16:15:00
trellix
trellix
Log4shell Vulnerability is the Coal in Our Stocking for 2021
2022-01-19 00:00:00
Log4shell Vulnerability is the Coal in Our Stocking for 2021
2022-01-19 00:00:00
symantec
symantec
Symantec Security Advisory for Log4j Vulnerability
2021-12-11 01:06:47
attackerkb
attackerkb
CVE-2021-44228 (Log4Shell)
2022-02-08 00:00:00
amazon
amazon
Important: log4j
2022-01-18 20:15:00