Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2021.0572
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2021-0572)
Zusammenfassung:	The remote host is missing an update for the 'log4j' package(s) announced via the MGASA-2021-0572 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'log4j' package(s) announced via the MGASA-2021-0572 advisory. Vulnerability Insight: Updated log4j packages fix security vulnerability: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted (CVE-2021-45105). Affected Software/OS: 'log4j' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-45105 CERT/CC vulnerability note: VU#930724 https://www.kb.cert.org/vuls/id/930724 Cisco Security Advisory: 20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 https://security.netapp.com/advisory/ntap-20211218-0001/ Debian Security Information: DSA-5024 (Google Search) https://www.debian.org/security/2021/dsa-5024 https://logging.apache.org/log4j/2.x/security.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.zerodayinitiative.com/advisories/ZDI-21-1541/ http://www.openwall.com/lists/oss-security/2021/12/19/1
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.