Lucene search

Third Log4J Bug Can Trigger DoS; Apache Issues Patch

🗓️ 20 Dec 2021 16:57:01Reported by Lisa VaasType

Apache issues patch for third Log4J bug enabling Do

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is vulnerable to a denial of service vulnerability in Apache log4j2 component (CVE-2021-45105 & CVE-2021-45046)	20 Jan 202220:35	–	ibm
IBM Security Bulletins	Security Bulletin: StoredIQ is vulnerable to denial of service and remote code execution in Apache Log4j (CVE-2021-44228, CVE-2021-45046).	17 Jun 202221:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Informix Dynamic Server is vulnerable to denial of service (CVE-2021-45105) and remote code execution (CVE-2021-45046) due to Apache Log4j	15 Apr 202213:31	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apache Log4j, IBM Cloud PAK for Watson AI Ops is vulnerable to arbitrary code execution (CVE-2021-45046) and denial of service (CVE-2021-45105)	5 Apr 202218:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Big SQL is vulnerable to arbitrary code execution and denial of service due to Apache Log4j (CVE-2021-45046, CVE-2021-45105)	22 Mar 202216:47	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apache Log4j, IBM Content Navigator is vulnerable to arbitrary code execution (CVE-2021-45046) and denial of service (CVE-2021-45105)	25 Feb 202223:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105 and CVE-2021-45046)	18 Feb 202212:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Log4j affect IBM Spectrum Control (CVE-2021-45105, CVE-2021-45046)	10 Feb 202210:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Management Platform for EDB Postgres Enterprise is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)	2 Feb 202219:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Automationis vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105 and CVE-2021-45046)	25 Jan 202213:53	–	ibm

Source	Link
logging	www.logging.apache.org/log4j/2.x/download.html
threatpost	www.threatpost.com/zero-day-in-ubiquitous-apache-log4j-tool-under-active-attack/176937/
threatpost	www.threatpost.com/log4shell-attacks-origin-botnet/176977/
threatpost	www.threatpost.com/apache-log4j-log4shell-mutations/176962/
threatpost	www.threatpost.com/apache-patch-log4shell-log4j-dos-attacks/177064/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-44228
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45105
zerodayinitiative	www.zerodayinitiative.com/blog/2021/12/17/cve-2021-45105-denial-of-service-via-uncontrolled-recursion-in-log4j-strsubstitutor
threatpost	www.threatpost.com/new-log4shell-attack-vector-local-hosts/177128/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45046

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Dec 2021 16:01Current

9.5High risk

Vulners AI Score9.5

CVSS29.3

CVSS310

EPSS0.972