Lucene search

RedHatRHSA-2022:0230

HistoryJan 21, 2022 - 7:00 p.m.

(RHSA-2022:0230) Moderate: Red Hat OpenShift Enterprise Logging bug fix and security update (5.2.6)

2022-01-2119:00:15

access.redhat.com

0.022 Low

EPSS

Percentile

89.6%

JSON

OpenShift Logging Bug Fix Release (5.2.6)

Security Fix(es):

nodejs-ua-parser-js: ReDoS via malicious User-Agent header (CVE-2021-27292)
log4j-core: remote code execution via JDBC Appender (CVE-2021-44832)

redhat

(RHSA-2022:0227) Moderate: Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.3)

2022-01-20 21:35:10

(RHSA-2022:0226) Moderate: Red Hat OpenShift Enterprise Logging bug fix and security update (5.1.7)

2022-01-20 21:34:49

(RHSA-2022:0225) Moderate: Red Hat OpenShift Enterprise Logging bug fix and security update (5.0.12)

2022-01-20 21:04:07

redhatcve

CVE-2021-27292

2022-05-07 14:19:14

CVE-2021-44832

2022-05-07 14:30:53

nvd

CVE-2021-27292

2021-03-17 13:15:15

CVE-2021-44832

2021-12-28 20:15:08

prion

Design/Logic Flaw

2021-03-17 13:15:00

Remote code execution

2021-12-28 20:15:00

cve

CVE-2021-27292

2021-03-17 13:15:15

CVE-2021-44832

2021-12-28 20:15:08

cvelist

CVE-2021-27292

2021-03-17 12:34:48

CVE-2021-44832 Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

2021-12-28 19:35:11

debiancve

CVE-2021-27292

2021-03-17 13:15:15

CVE-2021-44832

2021-12-28 20:15:08

osv

Regular Expression Denial of Service (ReDoS) in ua-parser-js

2021-05-06 16:11:13

CVE-2021-27292

2021-03-17 13:15:15

apache-log4j2 - security update

2021-12-29 00:00:00

veracode

Regular Expression Denial Of Service (ReDoS)

2021-03-18 04:30:21

Remote Code Execution (RCE)

2021-12-29 01:02:12

github

Regular Expression Denial of Service (ReDoS) in ua-parser-js

2021-05-06 16:11:13

Improper Input Validation and Injection in Apache Log4j2

2022-01-04 16:14:20

GitHub’s response to Log4j vulnerability CVE-2021-44228

2021-12-13 19:06:34

ubuntucve

CVE-2021-27292

2021-03-17 00:00:00

CVE-2021-44832

2021-12-28 00:00:00

nodejs

Regular Expression Denial of Service

2021-05-06 16:15:15

ibm

Security Bulletin: IBM Sterling Connect:Direct for UNIX may be vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44832)

2022-02-12 01:30:58

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to Apache Log4j (CVE-2021-44832)

2022-01-17 16:16:00

Security Bulletin: Vulnerability in Apache Log4j may affect IBM Spectrum Protect Snapshot for VMware (CVE-2021-44832)

2022-02-01 11:37:31

amazon

Medium: aws-kinesis-agent

2022-01-18 21:37:00

checkpoint_advisories

Apache Log4j Remote Code Execution (CVE-2021-44832)

2022-01-03 00:00:00

huntr

Static Code Injection in playframework/play-samples

2022-01-16 20:00:18

nessus

FreeBSD : Rundeck3 -- Log4J RCE vulnerability (27c822a0-addc-11ed-a9ee-dca632b19f10)

2023-02-19 00:00:00

Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE

2021-12-28 00:00:00

openSUSE 15 Security Update : log4j (openSUSE-SU-2021:4208-1)

2021-12-31 00:00:00

openvas

Apache Log4j 2.x < 2.3.2, 2.4.x < 2.12.4, 2.13.x < 2.17.1 RCE Vulnerability (Dec 2021) - Windows

2022-01-10 00:00:00

openSUSE: Security Advisory for log4j (openSUSE-SU-2022:0002-1)

2022-02-01 00:00:00

Fedora: Security Advisory for log4j (FEDORA-2021-c6f471ce0f)

2022-01-07 00:00:00

freebsd

Rundeck3 -- Log4J RCE vulnerability

2021-12-11 00:00:00

mageia

Updated log4j packages fix security vulnerability

2022-01-03 10:36:40

broadcom

BSA-2021-1658

2021-12-30 00:00:00

debian

[SECURITY] [DLA 2870-1] apache-log4j2 security update

2021-12-29 22:57:42

redos

ROS-20220125-04

2022-01-25 00:00:00

K14122652 : Apache Log4j2 vulnerability CVE-2021-44832

2021-12-30 00:00:00

suse

Security update for log4j (moderate)

2021-12-30 00:00:00

Security update for log4j (moderate)

2022-01-02 00:00:00

fedora

[SECURITY] Fedora 34 Update: log4j-2.17.1-1.fc34

2022-01-06 00:51:53

[SECURITY] Fedora 35 Update: log4j-2.17.1-1.fc35

2022-01-06 01:12:26

githubexploit

Exploit for Improper Input Validation in Apache Log4J

2021-12-30 20:24:07

Exploit for Injection in Apache Log4J

2021-12-29 07:50:05

Exploit for Deserialization of Untrusted Data in Apache Log4J

2021-12-14 15:13:06

kaspersky

KLA12406 RCE vulnerability in Apache Log4j

2021-12-28 00:00:00

attackerkb

CVE-2021-44832

2021-12-28 00:00:00

ubuntu

Apache Log4j 2 vulnerabilities

2022-01-11 00:00:00

thn

Lazarus Group Using Log4j Exploits to Deploy Remote Access Trojans

2023-12-11 13:00:00

New Apache Log4j Update Released to Patch Newly Discovered Vulnerability

2021-12-29 04:59:00

Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities

2022-01-05 05:12:00

threatpost

Microsoft Sees Rampant Log4j Exploit Attempts, Testing

2022-01-04 22:49:54

hivepro

Prophet Spider exploits Log4j and Citrix vulnerabilities to deploy webshells

2022-03-10 16:20:17

Apache released a patch to address the critical zero-day vulnerability in log4j

2021-12-29 09:27:58

cisco

Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021

2021-12-10 18:45:00

paloalto

Impact of Log4j Vulnerabilities CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832

2021-12-10 21:45:00

citrix

Citrix Security Advisory for CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832.

2021-12-11 17:15:50

rapid7blog

Widespread Exploitation of Critical Remote Code Execution in Apache Log4j

2021-12-10 15:30:00

qualysblog

Is Your Web Application Exploitable By Log4Shell Vulnerability?

2021-12-15 17:06:36

arista

Security Advisory 0070

2022-05-20 00:00:00

checkpoint_security

Check Point's response to Apache Log4j Remote Code Execution

2021-12-10 11:28:03

0.022 Low

EPSS

Percentile

89.6%

JSON

(RHSA-2022:0230) Moderate: Red Hat OpenShift Enterprise Logging bug fix and security update (5.2.6)

Related