Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2021-45105

A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service. (CVE-2021-45105)

Source

ALAS2022-2021-008

Amazon Linux 2022 Security Advisory: ALAS-2021-008
Advisory Release Date: 2021-12-22 20:07 Pacific
Advisory Updated Date: 2021-12-23 19:51 Pacific

Severity: Medium

References: CVE-2021-45105

Issue Overview:

A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service. (CVE-2021-45105)

Affected Packages:

log4j

Issue Correction:
Run dnf update --releasever=2022.0.20211222 log4j to update your system.

New Packages:

noarch:
    log4j-slf4j-2.17.0-1.amzn2022.0.1.noarch
    log4j-jcl-2.17.0-1.amzn2022.0.1.noarch
    log4j-2.17.0-1.amzn2022.0.1.noarch

src:
    log4j-2.17.0-1.amzn2022.0.1.src

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2022-2021-008

ALAS2022-2021-008

Vulmon Search

About

Products

Connect