Log4j-CVE-Detect

Log4J-CVE-Detect このリポジトリには、CVE-2021-44228、CVE-2021-45046、または CVE-2021-45105 に対して脆弱な log4j のバージョンを検出するための YARA ルール一式が含まれています。影響を受けるバージョンに現れるいくつかの特徴を探すことで検出を行います。 このツールは、Docker イメージ、システムパッケージ、ファイルシステムイメージ、さらにはインストールメディアなどのバイナリファイルに対して再帰的に動作します。対応しているファイル形式の完全なリストについては、「どのように動作するのか？」のセクションを参照してください。...

fail2ban-log4j

fail2ban-log4j fail2banのフィルターで、log4j CVE-2021-44228に対する攻撃を検知します。 インストール このファイルをfail2banのfilter.dディレクトリにコピーしてください。通常は以下のような場所にあります。 /etc/fail2ban/filter.d または類似の場所です。 jail.localまたはjail.confにapache-jndiセクションを追加してください： root@kitploit: apache-jndi enabled = true filter = apache-jndi port = http,https...

CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

CVE-2026-85656: Improper Neutralization of Special Elements used in an OS Command

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

768 CVEs Exploited in 2024, Reflecting a 20% Increase from 639 in 2023

As many as 768 vulnerabilities with designated CVE identifiers were reported as exploited in the wild in 2024, up from 639 CVEs in 2023, registering a 20% increase year-over-year. Describing 2024 as "another banner year for threat actors targeting the exploitation of vulnerabilities," VulnCheck...

Authorization

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6...

Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2022-1601)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.3-5. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1601 advisory. Versions of the Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3-5 are affected by a race...

Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2022-1806)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.3-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1806 advisory. Versions of the Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3-5 are affected by a race...

Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2022-1773)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-16. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1773 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

log4j CVE-2021-44228 + polkit CVE-2021-4034 Vulnerable instan...

CVE-2021-44530

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier Log4J CVE-2021-44228 allows a malicious actor to control the application...

Sql injection

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier Log4J CVE-2021-44228 allows a malicious actor to control the application...

CVE-2021-44530

Technical details for CVE-2021-44530 are not provided in the connected documents. The available sources only reaffirm a Log4j-related vulnerability in UniFi prior to 6.5.53. Monitor for updates from vendors.

Security Bulletin: Operations Dashboard is vulnerable to Log4j CVE-2021-45105

Summary Security Bulletin: Operations Dashboard is vulnerable to Log4j CVE-2021-45105 with details below Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by the failure to protect from uncontrolled recursion from self-referential...

Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2021-1554)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1554 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-13 will now explicitly mimic...

Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2021-1732)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1732 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-13 will now explicitly mimic...

Threat Intelligence on Log4j CVE: Key Findings and Their Implications

Continuing with our research into CVE-2021-44228, Akamai has previously written about what the vulnerability is and given recommendations on how to go beyond patching for extra protection. Across the Akamai network, we see traffic from 1.3 billion unique devices daily, with record traffic of 182...

Security Bulletin: Operations Dashboard in IBM Cloud Pak for Integration is vulnerable to log4j CVE-2021-44228

Summary Operations Dashboard in IBM Cloud Pak for Integration is vulnerable to log4j CVE-2021-44228 Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by the failure to protect against attacker...