Lucene search
PRIOn knowledge basePRION:CVE-2023-26464HistoryMar 10, 2023 - 2:15 p.m.
Code injection
2023-03-1014:15:00
PRIOn knowledge base
www.prio-n.com
11
code injection
log4j 1.x
dos
deserialization
hashmap
hashtable
vulnerability
UNSUPPORTED WHEN ASSIGNED
When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested)
hashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized.
This issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Related
openvas
openvas
Apache Log4j 1.x DoS Vulnerability (Mar 2023)
2023-03-13 00:00:00
nvd
nvd
CVE-2023-26464
2023-03-10 14:15:10
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2023-03-10 23:28:50
github
github
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
2023-03-10 15:30:43
redhatcve
redhatcve
CVE-2023-26464
2023-03-30 07:13:01
ubuntucve
ubuntucve
CVE-2023-26464
2023-03-10 00:00:00
osv
osv
CVE-2023-26464
2023-03-10 14:15:10
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
2023-03-10 15:30:43
cve
cve
CVE-2023-26464
2023-03-10 14:15:10
debiancve
debiancve
CVE-2023-26464
2023-03-10 14:15:10
cvelist
cvelist
f5
f5
K000133409 : Log4j vulnerability CVE-2023-26464
2023-04-05 00:00:00
nessus
nessus
RHEL 6 : log4j (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : log4j (Unpatched Vulnerability)
2024-06-03 00:00:00
Apache Log4j 1.x Multiple Vulnerabilities
2022-01-19 00:00:00
