Lucene search
UbuntuUSN-5192-2HistoryDec 17, 2021 - 12:00 a.m.
Apache Log4j 2 vulnerability
2021-12-1700:00:00
ubuntu.com
76
Releases
- Ubuntu 16.04 ESM
Packages
- apache-log4j2 - Apache Log4j - Logging Framework for Java
Details
USN-5192-1 fixed a vulnerability in Apache Log4j 2. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Chen Zhaojun discovered that Apache Log4j 2 allows remote attackers to run
programs via a special crafted input. An attacker could use this vulnerability
to cause a denial of service or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 16.04 | noarch | liblog4j2-java | < 2.4-2ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | liblog4j2-java | < 2.4-2 | UNKNOWN |
| Ubuntu | 16.04 | noarch | liblog4j2-java-doc | < 2.4-2 | UNKNOWN |
References
Related
ibm
ibm
Security Bulletin: IBM Tivoli System Automation Application Manager is vulnerable to Apache Log4j vulnerability (CVE-2021-44228)
2021-12-21 06:32:09
threatpost
threatpost
Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware
2022-02-09 21:56:49
Staff Think Conti Group Is a Legit Employer – Podcast
2022-03-14 21:50:45
NFT Investors Lose $1.7M in OpenSea Phishing Attack
2022-02-22 03:12:30
nessus
nessus
openSUSE 15 Security Update : logback (openSUSE-SU-2021:1613-1)
2021-12-25 00:00:00
Debian DLA-2842-1 : apache-log4j2 - LTS security update
2021-12-13 00:00:00
Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2022-1601)
2022-06-16 00:00:00
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
CVE-2021-44228 Apache Log4j 2 に対するマイクロソフトの対応
2021-12-12 08:00:00
suse
suse
Security update for log4j (important)
2021-12-13 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-03-03 17:18:43
Exploit for Improper Input Validation in Apache Log4J
2021-12-19 19:37:48
Exploit for Improper Input Validation in Apache Log4J
2021-12-18 20:53:06
impervablog
impervablog
5 Things We’ve Learned About CVE-2021-44228
2021-12-17 06:44:55
2021 in Review, Part 3: 5 Things Security Professionals Were Discussing this Year
2021-12-30 13:26:47
Analytics Are Essential for Effective Database Security
2022-01-13 15:23:02
malwarebytes
malwarebytes
What SMBs can do to protect against Log4Shell attacks
2021-12-15 20:59:31
thn
thn
rapid7blog
rapid7blog
Sharing the Gifts of Cybersecurity – Or, a Lesson From My First Year Without Santa
2022-01-03 15:00:00
How InsightAppSec Detects Log4Shell: Your Questions Answered
2022-02-15 15:16:37
hackerone
hackerone
Judge.me : Log4j RCE on https://judge.me/reviews
2021-12-15 10:30:12
U.S. Dept Of Defense: ███ ████████ running a vulnerable log4j
2021-12-31 00:55:49
f5
f5
K19026212 : Apache Log4j2 Remote Code Execution vulnerability CVE-2021-44228
2021-12-10 00:00:00
wallarmlab
wallarmlab
5 things you must know about Log4Shell
2021-12-11 01:22:39
Update on Log4Shell (CVE-2021-44228)
2021-12-10 20:22:36
qualysblog
qualysblog
Qualys Study Reveals How Enterprises Responded to Log4Shell
2022-03-18 13:00:00
akamaiblog
akamaiblog
packetstorm
packetstorm
AD Manager Plus 7122 Remote Code Execution
2023-04-03 00:00:00
mageia
mageia
Updated log4j packages fix security vulnerability
2021-12-11 04:02:37
freebsd
freebsd
bastillion -- log4j vulnerability
2021-12-10 00:00:00
serviio -- affected by log4j vulnerability
2021-12-13 00:00:00
ics
ics
Karakurt Data Extortion Group
2023-12-12 12:00:00
Johnson Controls exacq Enterprise Manager
2021-12-23 12:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5192-2)
2022-08-26 00:00:00
Fedora: Security Advisory for jansi (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache Struts 2.5.x Log4j RCE Vulnerability (Log4Shell) - Version Check
2021-12-13 00:00:00
redhat
redhat
zdt
zdt
VMware vCenter Server Unauthenticated Log4Shell JNDI Injection Remote Code Execution Exploit
2022-01-20 00:00:00
Intel Data Center Manager 5.1 Local Privilege Escalation Vulnerability
2022-12-10 00:00:00
Apache Log4j2 2.14.1 - Information Disclosure Exploit
2021-12-14 00:00:00
nuclei
nuclei
Apache Log4j2 Remote Code Injection
2021-12-11 19:26:50
kaspersky
kaspersky
KLA12396 RCE vulnerability in Microsoft Developer Tools
2021-12-16 00:00:00
metasploit
metasploit
MobileIron Core Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-07-29 17:31:15
Log4Shell HTTP Scanner
2021-12-15 13:45:24
VMware vCenter Server Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-01-12 20:34:45
veracode
veracode
Remote Code Execution (RCE)
2021-12-10 15:09:45
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
talosblog
talosblog
How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity
2024-02-21 13:54:48
amd
amd
AMD Response to Log4j (Log4Shell) Vulnerability
2021-12-15 00:00:00
trendmicroblog
trendmicroblog
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-13 00:00:00
mssecure
mssecure
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00