apache log4net vulnerabilities and exploits

(subscribe to this query)

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote malicious users to cause a denial of service (memory corruption and termination) via unknown vectors.

Apache Log4net 1.2.9 Beta

Apache log4net versions prior to 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

Apache Log4net Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Oracle Application Testing Suite 13.3.0.1 Oracle Hospitality Simphony 19.1.3 Oracle Hospitality Simphony 18.2.7.2 Oracle Hospitality Opera 5 5.5 Oracle Hospitality Opera 5 5.6 Netapp Snapcenter -Netapp Manageability Software Development Kit -

4 Github repositories

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1151 Github repositories28 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook