Lucene search
Ubuntu.comUB:CVE-2019-17571HistoryDec 20, 2019 - 12:00 a.m.
CVE-2019-17571
2019-12-2000:00:00
ubuntu.com
ubuntu.com
65
0.794 High
EPSS
Percentile
98.3%
Included in Log4j 1.2 is a SocketServer class that is vulnerable to
deserialization of untrusted data which can be exploited to remotely
execute arbitrary code when combined with a deserialization gadget when
listening to untrusted network traffic for log data. This affects Log4j
versions up to 1.2 up to 1.2.17.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | apache-log4j1.2 | < 1.2.17-8+deb10u1build0.18.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | apache-log4j1.2 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | apache-log4j1.2 | < 1.2.17-7ubuntu1+esm1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2019-17571
lists.apache.org/thread.html/eea03d504b36e8f870e8321d908e1def1addda16adda04327fe7c125%40%3Cdev.logging.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2019-17571
security-tracker.debian.org/tracker/CVE-2019-17571
ubuntu.com/security/notices/USN-4495-1
ubuntu.com/security/notices/USN-5998-1
www.cve.org/CVERecord?id=CVE-2019-17571
Related
f5
f5
K61529042 : Log4j vulnerability CVE-2019-17571
2020-04-08 00:00:00
ibm
ibm
osv
osv
CVE-2019-17571
2019-12-20 17:15:11
Deserialization of Untrusted Data in Log4j
2020-01-06 18:43:49
veracode
veracode
Arbitrary Code Execution
2019-12-23 04:57:47
Remote Code Execution (RCE)
2017-04-18 01:36:45
debiancve
debiancve
CVE-2019-17571
2019-12-20 17:15:11
nessus
nessus
Debian DLA-2065-1 : apache-log4j1.2 security update
2020-01-13 00:00:00
RHEL 6 : log4j (RHSA-2022:5053)
2022-06-15 00:00:00
Debian DSA-4686-1 : apache-log4j1.2 - security update
2020-05-18 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2019-17571 in log4j
2022-06-21 20:23:31
github
github
Deserialization of Untrusted Data in Log4j
2020-01-06 18:43:49
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0054-1)
2021-04-19 00:00:00
Apache Log4j 1.2.x <= 1.2.17 RCE Vulnerability - Windows
2021-12-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0053-1)
2021-06-09 00:00:00
redhat
redhat
(RHSA-2022:5053) Important: log4j security update
2022-06-15 10:01:13
(RHSA-2017:2423) Important: log4j security update
2017-08-07 07:26:13
checkpoint_advisories
checkpoint_advisories
Apache Log4j Remote Code Execution (CVE-2019-17571)
2020-03-01 00:00:00
debian
debian
[SECURITY] [DSA 4686-1] apache-log4j1.2 security update
2020-05-15 22:17:02
atlassian
atlassian
cve
cve
CVE-2019-17571
2019-12-20 17:15:11
ubuntu
ubuntu
Apache Log4j vulnerability
2020-09-15 00:00:00
Apache Log4j vulnerabilities
2023-04-05 00:00:00
prion
prion
Deserialization of untrusted data
2019-12-20 17:15:00
cvelist
cvelist
CVE-2019-17571
2019-12-20 16:01:21
symantec
symantec
redhatcve
redhatcve
CVE-2017-5645
2019-10-10 10:12:57
CVE-2019-17571
2020-04-05 23:06:12
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2019-12-25 16:46:11
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 19:14:23
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 07:48:49
centos
centos
log4j security update
2017-08-31 18:57:53
rosalinux
rosalinux
Advisory ROSA-SA-2021-1909
2021-07-02 17:26:24
attackerkb
attackerkb
CVE-2019-17571
2019-12-20 00:00:00
amazon
amazon
Important: log4j
2022-01-18 20:15:00
Medium: log4j
2022-01-18 21:37:00
mageia
mageia
Updated davmail packages fix security vulnerability
2023-04-15 22:03:44
gentoo
gentoo
Apache Log4j: Multiple Vulnerabilities
2024-02-18 00:00:00
cert
cert
Apache Log4j allows insecure JNDI lookups
2021-12-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00