CVE-2021-44228

Vulnerabilità in Log4j Aggiornamento 19.12.2021: Continuano a essere scoperte nuove vulnerabilità e nuovi modi di sfruttarle in Log4j. Abbiamo aggiunto tre diagrammi di flusso mind map al repository git che descrivono rispettivamente versione vulnerabile di Log4j, come verificare se si è...

DEBIAN-CVE-2021-46984

In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted blkmqschedbiomerge gets the ctx and hctx for the current CPU and passes the hctx to -biomerge. kyberbiomerge then gets the ctx for the current CPU again and uses that to get the...

UBUNTU-CVE-2021-45046

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context...