Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2021-4104

A flaw was found in the Java logging library Apache Log4j in version 1.x . This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender. This flaw has been filed for Log4j 1.x, the corresponding flaw information for Log4j 2.x is available at: https://access.redhat.com/security/cve/CVE-2021-44228 (CVE-2021-4104)

Source

ALAS2-2022-1739

Amazon Linux 2 Security Advisory: ALAS-2022-1739
Advisory Release Date: 2022-01-18 21:37 Pacific
Advisory Updated Date: 2022-01-20 19:31 Pacific

Severity: Medium

References: CVE-2021-4104

Issue Overview:

A flaw was found in the Java logging library Apache Log4j in version 1.x . This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender. This flaw has been filed for Log4j 1.x, the corresponding flaw information for Log4j 2.x is available at: https://access.redhat.com/security/cve/CVE-2021-44228 (CVE-2021-4104)

Affected Packages:

log4j

Issue Correction:
Run yum update log4j to update your system.

New Packages:

noarch:
    log4j-1.2.17-17.amzn2.noarch
    log4j-manual-1.2.17-17.amzn2.noarch
    log4j-javadoc-1.2.17-17.amzn2.noarch

src:
    log4j-1.2.17-17.amzn2.src

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2-2022-1739

ALAS2-2022-1739

Vulmon Search

About

Products

Connect