CVE-2017-5645
Critical · 9.8CVSS
9.8
EPSS
89.8%
Published
Apr 17, 2017
CISA due date
—
The record
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.logging.log4j:log4j | 2.0 | 2.8.2 |
| Maven | org.apache.logging.log4j:log4j-core | 2.0 | 2.8.2 |
| Debian:11 | apache-log4j2 | 0 | 2.7-2 |
| Debian:12 | apache-log4j2 | 0 | 2.7-2 |
| Debian:13 | apache-log4j2 | 0 | 2.7-2 |
| Debian:14 | apache-log4j2 | 0 | 2.7-2 |
| Red Hat:enterprise_linux:7::client | log4j | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::client | log4j-javadoc | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::client | log4j-manual | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::computenode | log4j | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::computenode | log4j-javadoc | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::computenode | log4j-manual | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::server | log4j | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::server | log4j-javadoc | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::server | log4j-manual | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::workstation | log4j | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::workstation | log4j-javadoc | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:enterprise_linux:7::workstation | log4j-manual | 0 | 0:1.2.17-16.el7_4 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | log4j | 0 | 0:1.2.14-19.patch_01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el6 | log4j | 0 | 0:1.2.14-19.patch_01.ep5.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-cxf | 0 | 0:2.7.18-7.SP6_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson | 0 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-core-asl | 0 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-jaxrs | 0 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-mapper-asl | 0 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-xc | 0 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-core-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-entitymanager-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-envers-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-infinispan-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hornetq | 0 | 0:2.3.25-22.SP20_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-cachestore-jdbc | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-cachestore-remote | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-client-hotrod | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-core | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-appclient | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-cli | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-client-all | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-clustering | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-cmp | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-configadmin | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-connector | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-controller | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-controller-client | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-core-security | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-deployment-repository | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-deployment-scanner | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-domain-http | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-domain-management | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ee | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ee-deployment | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ejb3 | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-embedded | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-host-controller | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jacorb | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jaxr | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jaxrs | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jdr | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jmx | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jpa | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jsf | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jsr77 | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-logging | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-mail | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-management-client-content | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-messaging | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-modcluster | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-naming | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-network | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi-configadmin | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi-service | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-picketlink | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-platform-mbean | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-pojo | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-process-controller | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-protocol | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-remoting | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-sar | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-security | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-server | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-system-jmx | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-threads | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-transactions | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-version | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-web | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-webservices | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-weld | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-xts | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-marshalling | 0 | 0:1.4.10-3.SP3_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata-appclient | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata-common | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata-ear | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata-ejb | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata-web | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-modules | 0 | 0:1.3.10-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-remoting3 | 0 | 0:3.3.10-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-vfs2 | 0 | 0:3.2.12-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-appclient | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-bundles | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-core | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-domain | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-javadocs | 0 | 0:7.5.17-4.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-modules-eap | 0 | 0:7.5.17-1.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-product-eap | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-standalone | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-welcome-content-eap | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossweb | 0 | 0:7.5.24-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | log4j-eap6 | 0 | 0:1.2.16-12.redhat_3.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | log4j-jboss-logmanager | 0 | 0:1.1.4-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | picketlink-bindings | 0 | 0:2.5.4-17.SP15_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | picketlink-federation | 0 | 0:2.5.4-17.SP15_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | apache-cxf | 0 | 0:2.7.18-7.SP6_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | codehaus-jackson | 0 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | codehaus-jackson-core-asl | 0 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | codehaus-jackson-jaxrs | 0 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | codehaus-jackson-mapper-asl | 0 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | codehaus-jackson-xc | 0 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hibernate4-core-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hibernate4-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hibernate4-entitymanager-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hibernate4-envers-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hibernate4-infinispan-eap6 | 0 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hornetq | 0 | 0:2.3.25-22.SP20_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-cachestore-jdbc | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-cachestore-remote | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-client-hotrod | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-core | 0 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-appclient | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-cli | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-client-all | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-clustering | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-cmp | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-configadmin | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-connector | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-controller | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-controller-client | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-core-security | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-deployment-repository | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-deployment-scanner | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-domain-http | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-domain-management | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-ee | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-ee-deployment | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-ejb3 | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-embedded | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-host-controller | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jacorb | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jaxr | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jaxrs | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jdr | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jmx | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jpa | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jsf | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jsr77 | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-logging | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-mail | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-management-client-content | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-messaging | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-modcluster | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-naming | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-network | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-osgi | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-osgi-configadmin | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-osgi-service | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-picketlink | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-platform-mbean | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-pojo | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-process-controller | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-protocol | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-remoting | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-sar | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-security | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-server | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-system-jmx | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-threads | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-transactions | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-version | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-web | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-webservices | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-weld | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-xts | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-ec2-eap | 0 | 0:7.5.17-1.Final_redhat_4.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-ec2-eap-samples | 0 | 0:7.5.17-1.Final_redhat_4.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-marshalling | 0 | 0:1.4.10-3.SP3_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-metadata | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-metadata-appclient | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-metadata-common | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-metadata-ear | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-metadata-ejb | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-metadata-web | 0 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-modules | 0 | 0:1.3.10-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-remoting3 | 0 | 0:3.3.10-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-vfs2 | 0 | 0:3.2.12-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jbossas-appclient | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jbossas-bundles | 0 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
Related vulnerabilities
- CVE-2025-68161 Apache Log4j does not verify the TLS hostname in its Socket Appender Also affects org.apache.logging.log4j:log4j-core
- CVE-2021-44832 Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2… Also affects org.apache.logging.log4j:log4j-core
- CVE-2021-45105 Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not… Also affects org.apache.logging.log4j:log4j-core
- CVE-2021-44228 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and… Also affects org.apache.logging.log4j:log4j-core
- CVE-2022-23305 By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration… Also affects log4j
- CVE-2022-23307 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Also affects log4j
- CVE-2022-23302 JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data… Also affects log4j
- CVE-2021-4104 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the… Also affects log4j