VulnerabilityhighExploited in the wild

Apache Issues 3rd Patch to Fix New High

The Hacker Newsby @TheHackersNewsDec 20, 2021 · 05:02 UTC (Dec 20, 2021)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2021-45105 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-45105 CVE-2021-45046 CVE-2021-44228

Tags: cve-2021-45105 cve-2021-45046 cve-2021-44228 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-45046	Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix	9.0	100%	KEVRansomwarePoC	Dec 14, 2021 KEV May 1, 2023
CVE-2021-45105	Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups	5.9	100%		Dec 18, 2021

From the original article

2 min read at thehackernews.com

The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2. 17. 0 — for the widely used logging library that could be exploited by malicious actors to stage a denial-of-service (DoS) attack.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.