Lucene search
Gentoo FoundationGLSA-202312-02HistoryDec 20, 2023 - 12:00 a.m.
Minecraft Server: Remote Code Execution
2023-12-2000:00:00
Gentoo Foundation
security.gentoo.org
18
minecraft server
remote code execution
log4j
upgrade
resolution
vulnerability
Background
Minecraft Server is the official server for the sandbox video game.
Description
A vulnerability has been discovered in Minecraft Server. Please review the CVE identifier referenced below for details.
Impact
Vulnerable Minecraft Server versions include a bundled version of log4j which is vulnerable to remote code execution.
Workaround
There is no known workaround at this time.
Resolution
All Minecraft Server users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=games-server/minecraft-server-1.18.1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | games-server/minecraft-server | < 1.18.1 | UNKNOWN |
Related
nessus
nessus
CentOS 7 : log4j (CESA-2021:5206)
2021-12-21 00:00:00
RHEL 7 : rh-maven36-log4j12 (RHSA-2021:5269)
2021-12-23 00:00:00
Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104)
2021-12-15 00:00:00
ibm
ibm
Security Bulletin: IBM Security Access Manager for Enterprise Single Sign-On may be vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-4104)
2022-03-31 03:04:02
oraclelinux
oraclelinux
log4j security update
2021-12-21 00:00:00
log4j security update
2022-01-26 00:00:00
cnvd
cnvd
Apache Log4j Code Execution Vulnerability
2021-12-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for log4j12 (openSUSE-SU-2021:4112-1)
2022-02-01 00:00:00
Ubuntu: Security Advisory (USN-5223-2)
2023-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4112-1)
2021-12-18 00:00:00
centos
centos
log4j security update
2021-12-21 21:36:17
redhat
redhat
(RHSA-2021:5269) Moderate: rh-maven36-log4j12 security update
2021-12-22 21:14:37
(RHSA-2021:5206) Moderate: log4j security update
2021-12-20 08:38:19
kaspersky
kaspersky
KLA12407 RCE vulnerability in Apache Log4j
2021-12-14 00:00:00
osv
osv
apache-log4j1.2 vulnerability
2022-02-08 21:01:33
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
2021-12-17 20:42:38
CVE-2022-23302
2022-01-18 16:15:08
ubuntu
ubuntu
Apache Log4j 1.2 vulnerability
2022-02-08 00:00:00
Apache Log4j 1.2 vulnerability
2022-01-12 00:00:00
github
github
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
2021-12-17 20:42:38
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
2021-12-14 19:49:31
Deserialization of Untrusted Data in Log4j 1.x
2022-01-21 23:27:14
cve
cve
CVE-2021-4104
2021-12-14 12:15:12
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-4104
2022-01-17 14:23:20
gentoo
gentoo
Arduino: Remote Code Execution
2023-12-22 00:00:00
Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
prion
prion
Deserialization of untrusted data
2021-12-14 12:15:00
Deserialization of untrusted data
2022-01-18 16:15:00
atlassian
atlassian
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-03-07 08:14:14
Update Log4J to 1.2.17-atlassian-15 to fix CVE-2021-4104
2022-01-14 13:13:21
f5
f5
K59563964 : Apache Log4j Remote Code Execution vulnerability CVE-2022-23302
2022-01-31 00:00:00
K24554520 : Apache Log4j Remote Code Execution vulnerability CVE-2021-4104
2021-12-15 00:00:00
cvelist
cvelist
redhatcve
redhatcve
CVE-2021-44228
2022-05-07 14:19:14
CVE-2021-4104
2022-05-07 14:29:21
debiancve
debiancve
CVE-2022-23302
2022-01-18 16:15:08
CVE-2021-4104
2021-12-14 12:15:12
ubuntucve
ubuntucve
veracode
veracode
Deserialisation Of Untrusted Object
2021-12-15 13:38:24
trellix
trellix
Log4shell Vulnerability is the Coal in Our Stocking for 2021
2022-01-19 00:00:00
Log4shell Vulnerability is the Coal in Our Stocking for 2021
2022-01-19 00:00:00
amazon
amazon
Important: log4j
2022-01-18 20:15:00
threatpost
threatpost
Apache’s Fix for Log4Shell Can Lead to DoS Attacks
2021-12-15 14:04:19
symantec
symantec
Symantec Security Advisory for Log4j Vulnerability
2021-12-11 01:06:47
attackerkb
attackerkb
CVE-2021-44228 (Log4Shell)
2022-02-08 00:00:00
qualysblog
qualysblog
CVE-2021-44228: Apache Log4j2 Zero-Day Exploited in the Wild (Log4Shell)
2021-12-10 19:30:11
rapid7blog
rapid7blog
The Everyperson’s Guide to Log4Shell (CVE-2021-44228)
2021-12-15 19:44:42
rocky
rocky
parfait:0.5 security update
2022-01-26 14:27:19