Red Hat Security Advisory

RHSA-2022:5053

log4j security update

Released 2022-06-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6 ELS) log4j-1.2.14-6.7.el6_10
Red Hat Enterprise Linux Server Optional (v. 6 ELS) log4j-javadoc-1.2.14-6.7.el6_10, log4j-manual-1.2.14-6.7.el6_10

Fixes 1 record

TI-2019-13113 CVE-2019-17571 · GHSA-2qrg-x229-3v8q

Deserialization of untrusted data in Apache Log4j

CRITICAL 86

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6998 Published 2019-12-20 Partial fix CWE-502