2924 matches found
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 1 security update
An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 6 and Red Hat JBoss Web Server 3.1 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
log4j: deserialization of untrusted data in SocketServer
A flaw was discovered in Log4j, where a vulnerable SocketServer class may lead to the deserialization of untrusted data. This flaw allows an attacker to remotely execute arbitrary code when combined with a deserialization gadget...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
Fedora 26 : log4j (2017-11edc0d6c3)
Security fix for CVE-2017-5645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 25 Update: log4j12-1.2.17-19.fc25
Log4j is a tool to help the programmer output log statements to a variety of output targets...
[SECURITY] Fedora 24 Update: log4j12-1.2.17-19.fc24
Log4j is a tool to help the programmer output log statements to a variety of output targets...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
Important: Red Hat Security Advisory: rh-java-common-log4j security update
An update for rh-java-common-log4j is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Fedora 24 : log4j (2017-2ccfbd650a)
Security fix for CVE-2017-5645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora Update for log4j FEDORA-2017-2ccfbd650a
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for log4j FEDORA-2017-511ebfa8a3
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : log4j (2017-511ebfa8a3)
Security fix for CVE-2017-5645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 25 Update: log4j-2.5-5.fc25
Log4j is a tool to help the programmer output log statements to a variety of output targets...
[SECURITY] Fedora 26 Update: log4j-2.7-4.fc26
Log4j is a tool to help the programmer output log statements to a variety of output targets...
Apache logging component Log4j deserialization vulnerability affects all 2. x version-bug warning-the black bar safety net
! Open source stuff with more people, natural vulnerability. Apache for logging component Log4j to use the very flexible, in quite a lot of open source projects are using this exploit affects all Apache Log4j 2. Series version: Apache Log4j 2.0-alpha1 – Apache Log4j 2.8.1 using Java 7+users shoul...
Remote Code Execution (RCE)
log4j is vulnerable to remote code execution RCE. A malicious user can pass a malicious binary to the system that when deserialized, executes arbitrary code. This only affects applications that are using the TCP socket server or the UDP socket server to receive log events from another application...
Apache Log4j socket receiver deserialization vulnerability (CVE-2017-5645)
Versions Affected: all versions from 2.0-alpha1 to 2.8.1 Description: When using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. Mitigation: Ja...
Apache Log4j Remote Code Execution Vulnerability
Apache Log4j is currently in J2EE and J2SE development in the most used logging framework. A remote code execution vulnerability exists in Apache Log4j. The vulnerability allows an attacker to execute arbitrary code in the context of an affected application...
Apache logging component Log4j deserialization vulnerability affects all 2. x version-bug warning-the black bar safety net
! Open source stuff with more people, natural vulnerability. Apache for logging component Log4j to use the very flexible, in quite a lot of open source projects are using this exploit affects all Apache Log4j 2. Series version: Apache Log4j 2.0-alpha1 – Apache Log4j 2.8.1 using Java 7+users shoul...
UBUNTU-CVE-2017-5645
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code...