CVE-2023-26464 Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender

🗓️ 10 Mar 2023 13:38:16Reported by apacheType

Apache Log4j 1.x (EOL) DoS vulnerability in Chainsaw and SocketAppende

Reporter	Title	Published	Views	Family All 77
ibm	Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel	24 Jun 202511:53	–	ibm
ibm	Security Bulletin: An IBM QRadar SIEM SNMP protocol is vulnerable to a denial of service, SQL injection and could allow a remote attacker to execute arbitrary code on the system.	15 May 202408:35	–	ibm
ibm	Security Bulletin: TADDM is vulnerable to a denial of service vulnerability in Apache-Log4j (CVE-2023-26464)	23 Mar 202318:03	–	ibm
ibm	Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache Log4j	23 Jun 202310:37	–	ibm
ibm	Security Bulletin: Vulnerability in Log4j affects IBM Integrated Analytics System [CVE-2023-26464]	28 Sep 202415:27	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in Apache Log4j affects IBM Security Access Manager for Enterprise Single Sign-On	25 Jul 202304:26	–	ibm
ibm	Security Bulletin: Vulnerability from log4j-1.2.16.jar affect IBM Operations Analytics - Log Analysis (CVE-2023-26464)	25 May 202306:50	–	ibm
ibm	Security Bulletin: IBM Content Navigator is affected by Log4J 1.2.14	7 May 202613:31	–	ibm
ibm	Security Bulletin: Vulnerability in Log4j affects IBM Cloud Pak for Data Systems 1.0 (CPDS 1.0) [CVE-2023-26464]	7 May 202506:19	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Apache Log4j	2 May 202322:11	–	ibm

[
  {
    "defaultStatus": "unknown",
    "product": "Apache Log4j",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2",
        "status": "affected",
        "version": "1.0.4",
        "versionType": "maven"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "2",
        "versionType": "maven"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20230505-0008/
lists	www.lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t

05 May 2023 19:06Current

7.5High risk

Vulners AI Score7.5

EPSS0.01905

CWE-502