Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:0054-1

Опубликовано: 09 янв. 2020
Источник: suse-cvrf

Описание

Security update for log4j

This update for log4j fixes the following issues:

  • CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).

Список пакетов

HPE Helion OpenStack 8
log4j-1.2.15-126.3.1
SUSE Enterprise Storage 5
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP1-LTSS
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP2-BCL
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP2-LTSS
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP3-BCL
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP3-LTSS
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP4
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP5
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
log4j-1.2.15-126.3.1
SUSE Linux Enterprise Software Development Kit 12 SP4
log4j-1.2.15-126.3.1
log4j-manual-1.2.15-126.3.1
SUSE Linux Enterprise Software Development Kit 12 SP5
log4j-1.2.15-126.3.1
log4j-manual-1.2.15-126.3.1
SUSE OpenStack Cloud 7
log4j-1.2.15-126.3.1
SUSE OpenStack Cloud 8
log4j-1.2.15-126.3.1
SUSE OpenStack Cloud Crowbar 8
log4j-1.2.15-126.3.1

Ссылки

Описание

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.

Затронутые продукты
HPE Helion OpenStack 8:log4j-1.2.15-126.3.1
SUSE Enterprise Storage 5:log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP1-LTSS:log4j-1.2.15-126.3.1
SUSE Linux Enterprise Server 12 SP2-BCL:log4j-1.2.15-126.3.1
Ссылки
Уязвимость SUSE-SU-2020:0054-1