CVE-2023-6481

🗓️ 04 Dec 2023 08:35:44Reported by NCSC.chType

Serialization vulnerability in logback receiver component in versions 1.4.13, 1.3.13, and 1.2.12 allows DoS attac

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: Denial of Service in Logback used by Apache Zookeeper affect IBM Operations Analytics - Log Analysis (CVE-2023-6481)	28 Apr 202510:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Logback may affect the IBM Spectrum Protect Server (CVE-2023-6481)	25 Mar 202409:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Logback might affect IBM Storage Copy Data Management	27 Sep 202418:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	11 Mar 202419:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management vulnerable to denial of service in IBM Business Automation Workflow using Logback	13 Nov 202414:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	5 Feb 202415:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	16 Oct 202422:43	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2023-6481	12 Jul 202405:01	–	ibm

NVD

Node

qos logbackMatch1.2.12

qos logbackMatch1.3.13

qos logbackMatch1.4.13

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "logback receiver"
    ],
    "platforms": [
      "Windows",
      "Linux",
      "MacOS"
    ],
    "product": "logback",
    "repo": "https://github.com/qos-ch/logback",
    "vendor": "QOS.CH Sarl",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.4.14"
      },
      {
        "status": "unaffected",
        "version": "1.3.14"
      },
      {
        "status": "unaffected",
        "version": "1.2.13"
      }
    ]
  }
]

Source	Link
logback	www.logback.qos.ch/news.html
logback	www.logback.qos.ch/news.html

21 Nov 2024 08:43Current

7High risk

Vulners AI Score7

CVSS 3.17.1 - 7.5

EPSS0.00224