Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:14267-1

Опубликовано: 09 янв. 2020
Источник: suse-cvrf

Описание

Security update for log4j

This update for log4j fixes the following issues:

  • CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
log4j-1.2.15-26.32.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS
log4j-1.2.15-26.32.14.1

Ссылки

Описание

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:log4j-1.2.15-26.32.14.1
SUSE Linux Enterprise Server 11 SP4-LTSS:log4j-1.2.15-26.32.14.1
Ссылки