Lucene search

CVE-2021-45105

🗓️ 18 Dec 2021 00:00:00Reported by AttackerKBType

Apache Log4j2 vulnerability allows denial of service due to uncontrolled recursion in self-referential lookups. Fixed in versions 2.17.0, 2.12.3, and 2.3.1

Reporter	Title	Published	Views	Family All 199
Debian	[SECURITY] [DSA 5024-1] apache-log4j2 security update	18 Dec 202120:39	–	debian
Debian	[SECURITY] [DLA 2852-1] apache-log4j2 security update	26 Dec 202121:44	–	debian
Tenable Nessus	Apache Log4j 2.x < 2.17.0 DoS (deprecated)	18 Dec 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : log4j (openSUSE-SU-2021:4118-1)	21 Dec 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : aws-kinesis-agent (ALAS-2021-1733)	23 Dec 202100:00	–	nessus
Tenable Nessus	FreeBSD : OpenSearch -- Log4Shell (d1be3d73-6737-11ec-9eea-589cfc007716)	27 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat Single Sign-On 7.5.2 security update on RHEL 7 (Low) (RHSA-2022:1462)	21 Apr 202200:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Single Sign-On 7.5.2 security update on RHEL 8 (Low) (RHSA-2022:1463)	21 Apr 202200:00	–	nessus
Tenable Nessus	Oracle WebCenter Portal DoS (Jan 2022 CPU)	19 Jan 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : log4j, log4j-jcl, log4j-slf4j (ALAS2022-2021-008)	11 Dec 202400:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032
kb	www.kb.cert.org/vuls/id/930724
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
openwall	www.openwall.com/lists/oss-security/2021/12/19/1
debian	www.debian.org/security/2021/dsa-5024
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf
security	www.security.netapp.com/advisory/ntap-20211218-0001/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf
logging	www.logging.apache.org/log4j/2.x/security.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Dec 2021 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS24.3

CVSS35.9

EPSS0.66522