ch.qos.logback:log4j-bridge (0.9), ch.qos.logback:logback-access (0.9) +2 more potentially affected by CVE-2024-12798 via ch.qos.logback:logback-core (0.9)

ch.qos.logback:logback-core MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9 - ch.qos.logback:logback-access 0.9 - ch.qos.logback:logback-classic 0.9 -...

ch.qos.logback:logback-access (0.5), ch.qos.logback:logback-classic (0.5) potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.5)

ch.qos.logback:logback-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.5 - ch.qos.logback:logback-classic 0.5 Source cves: CVE-2024-12801 Source...

ch.qos.logback:logback-access (0.9.20), ch.qos.logback:logback-classic (0.9.20) +25 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.9.20)

ch.qos.logback:logback-core MAVEN version 0.9.20 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.20 - ch.qos.logback:logback-classic 0.9.20 -...

Denial Of Service (DoS)

ch.qos.logback:logback-classic is vulnerable to Denial Of Service DoS. The vulnerability is due to the readObject method in the LoggingEventVO class which fails to check the length of an argument array during deserialization. An attacker could send crafted data, resulting in Denial of Service DoS...

Atlassian Confluence 6.0.1 < 7.19.18 / 7.20.x < 8.5.5 / 8.6.x < 8.7.2 / 8.8.0 (CONFSERVER-94111)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-94111 advisory. - This High severity ch.qos.logback:logback-classic Dependency vulnerability was introduced in versions 6.0.1 of Confluence Data Center and Server...

Security Bulletin:IBM Asset Data Dictionary Component uses logback-classic-1.3.0-alpha16.jar which is vulnerable to CVE-2023-6378

Summary IBM Asset Data Dictionary Component uses logback-classic-1.3.0-alpha16.jar which is vulnerable to CVE-2023-6378. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-6378 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a...

be.yildiz-games:common-logging-logback (1.1.25), ch.qos.logback:logback-access (1.4.13) +131 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.4.13)

ch.qos.logback:logback-core MAVEN version 1.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - be.yildiz-games:common-logging-logback 1.1.25 - ch.qos.logback:logback-access 1.4.13 -...

ch.qos.logback:logback-access (1.3.13), ch.qos.logback:logback-classic (1.3.13) +28 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.3.13)

ch.qos.logback:logback-core MAVEN version 1.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 1.3.13 - ch.qos.logback:logback-classic 1.3.13 -...

ch.qos.logback:logback-access (1.3.13), ch.qos.logback:logback-classic (1.3.13) +28 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.3.13)

ch.qos.logback:logback-core MAVEN version 1.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 1.3.13 - ch.qos.logback:logback-classic 1.3.13 -...

Denial Of Service (DoS)

ch.qos.logback:logback-classic is vulnerable to Denial Of Service DoS. The vulnerability is due a missing check on the length of an argument array during the deserialization process. This could lead to Denial of Service attacks by sending crafted data...

ch.qos.logback:logback-examples (0.9.17), ch.qos.mistletoe:mistletoe-test (0.2) +16 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.17)

ch.qos.logback:logback-classic MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.17 - ch.qos.mistletoe:mistletoe-test 0.2 - com.codiform:moo...

ch.qos.logback:logback-examples (0.9.11), org.coosproject.examples:ping-impl (>=1.0.0, <=1.3.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.11)

ch.qos.logback:logback-classic MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.11 - org.coosproject.examples:ping-impl =1.0.0, =1.3.1 Source...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-examples (0.8.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.8.1)

ch.qos.logback:logback-classic MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-examples 0.8.1 Source cves: CVE-2023-637...

ch.qos.logback:logback-access (0.5), ch.qos.logback:logback-classic (0.5) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.5)

ch.qos.logback:logback-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.5 - ch.qos.logback:logback-classic 0.5 Source cves: CVE-2023-6378 Source...

ch.qos.logback:logback-access (0.9.22), ch.qos.logback:logback-classic (0.9.22) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.22)

ch.qos.logback:logback-core MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.22 - ch.qos.logback:logback-classic 0.9.22 -...

ch.qos.logback:logback-access (0.9.9), ch.qos.logback:logback-classic (0.9.9) +40 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.9)

ch.qos.logback:logback-core MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.9 - ch.qos.logback:logback-classic 0.9.9 -...

ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

ch.qos.logback:logback-examples (0.9.16), de.huxhorn.lilith:de.huxhorn.lilith (0.9.36) +7 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.16)

ch.qos.logback:logback-classic MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.16 - de.huxhorn.lilith:de.huxhorn.lilith 0.9.36 -...

ch.qos.logback:log4j-bridge (0.9.7), ch.qos.logback:logback-examples (0.9.7) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.7)

ch.qos.logback:logback-classic MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.7 - ch.qos.logback:logback-examples 0.9.7 - com.belerweb:social-sdk...

ch.qos.logback:log4j-bridge (0.7), ch.qos.logback:logback-access (0.7) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.7)

ch.qos.logback:logback-core MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.7 - ch.qos.logback:logback-access 0.7 - ch.qos.logback:logback-classic 0.7 -...