Apache log4j: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 1

• Critical 10.0
  CVE-2021-44228 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

  Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 10, 2021

  KEV Dec 10, 2021

Revision history

1. 2026-07-07 #45

   Neue Updates von Amazon aufgenommen

2. 2025-11-05 #44

   Neue Updates von Dell aufgenommen

3. 2025-02-23 #43

   Neue Updates von Red Hat aufgenommen

4. 2022-12-11 #42

   Neue Updates von Amazon aufgenommen

5. 2022-09-20 #41

   Neue Updates von HCL aufgenommen

6. 2022-08-30 #40

   Neue Updates aufgenommen

7. 2022-08-14 #39

   Neue Updates von HCL aufgenommen

8. 2022-07-24 #38

   Neue Updates von HCL aufgenommen

9. 2022-07-12 #37

   Neue Updates von IBM aufgenommen

10. 2022-06-16 #36

    Neue Updates von Amazon aufgenommen

11. 2022-05-17 #35

    Neue Updates von HCL aufgenommen

12. 2022-04-27 #34

    Neue Updates von HCL aufgenommen

13. 2022-04-26 #33

    Neue Updates von AVAYA aufgenommen

14. 2022-04-24 #32

    Neue Updates von HCL aufgenommen

15. 2022-04-19 #31

    Neue Updates von Amazon aufgenommen

16. 2022-04-11 #30

    Neue Updates von Red Hat aufgenommen

17. 2022-04-05 #29

    Neue Updates von HCL aufgenommen

18. 2022-03-29 #28

    Neue Updates von HCL aufgenommen

19. 2022-03-24 #27

    Neue Updates von HCL aufgenommen

20. 2022-03-22 #26

    Neue Updates von HCL aufgenommen

21. 2022-02-03 #25

    Neue Updates von IBM aufgenommen

22. 2022-01-26 #24

    Neue Updates von Red Hat und ASC aufgenommen

23. 2022-01-23 #23

    Neue Updates aufgenommen

24. 2022-01-20 #22

    Neue Updates von Red Hat aufgenommen

25. 2022-01-19 #21

    Neue Updates von Red Hat aufgenommen

References

• Red Hat Bugzilla - Bug 2030932 vom 2021-12-09
  https://bugzilla.redhat.com/show_bug.cgi?id=2030932
• GitHub Security Advisory GHSA-jfh8-c2jp-5v3q vom 2021-12-09
  https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
• GitHub: CVE-2021-44228 Remote Code Injection In Log4j vom 2021-12-10
  https://github.com/jas502n/Log4j2-CVE-2021-44228
• Apache log4j Security Advisory vom 2021-12-10
  https://logging.apache.org/log4j/2.x/security.html
• Tweet von Deutsche Telekom CERT vom 2021-12-10
  https://twitter.com/DTCERT/status/1469258597930614787
• CERT-EU Security Advisory 2021-067 vom 2021-12-10
  https://media.cert.europa.eu/static/SecurityAdvisories/2021/CERT-EU-SA2021-067.pdf
• Elastic Security Announcement ESA-2021-31 vom 2021-12-13
  https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476
• ExtremeNetworks Vulnerability Notice VN-2020-465 vom 2021-12-12
  https://extremeportal.force.com/ExtrArticleDetail?an=000100806
• VMware Security Advisory VMSA-2021-0028 vom 2021-12-11
  https://www.vmware.com/security/advisories/VMSA-2021-0028.html
• FortiGuard Labs PSIRT Advisory FG-IR-21-245 vom 2021-12-12
  https://www.fortiguard.com/psirt/FG-IR-21-245
• Amazon Linux Security Advisory ALAS-2021-003 vom 2021-12-11
  https://alas.aws.amazon.com/AL2022/ALAS-2021-003.html
• IBM Security Bulletin 6525706 vom 2021-12-13
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-websphere-application-server-cve-2021-44228/
• Debian Security Advisory DLA-2842 vom 2021-12-12
  https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html
• Cisco Security Advisory CISCO-SA-APACHE-LOG4J-QRUKNEBD vom 2021-12-10
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
• HCL Article KB0095493 vom 2021-12-13
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095493
• Symantec Security Advisory SYMSA19793 vom 2021-12-13
  https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Security-Advisory-for-Log4j-2-CVE-2021-44228-Vulnerability/SYMSA19793
• Debian Security Advisory DSA-5020 vom 2021-12-12
  http://www.debian.org/security/2021/dsa-5020
• F-Secure Policy Manager Update vom 2021-12-12
  https://status.f-secure.com/incidents/sk8vmr0h34pd
• RSA SecurID Authentication Manager Update vom 2021-12-12
  https://community.rsa.com/t5/general-security-advisories-and/rsa-customer-advisory-apache-vulnerability-log4j2-cve-2021-44228/ta-p/660501
• Splunk Security Advisory vom 2021-12-12
  https://www.splunk.com/en_us/blog/bulletins/splunk-security-advisory-for-apache-log4j-cve-2021-44228.html
• Red Hat Security Bulletin RHSB-2021-009 vom 2021-12-13
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-009
• Apache Kafka Mailing List vom 2021-12-12
  https://lists.apache.org/thread/lgbtvvmy68p0059yoyn9qxzosdmx4jdv
• Apache Struts Security Advice vom 2021-12-12
  https://struts.apache.org/announce-2021#a20211212-2
• Oracle Security Alert
  https://www.oracle.com/security-alerts/alert-cve-2021-44228.html
• Spring.io Blog
  https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot
• SOS Job Scheduler Vulnerability Release
  https://kb.sos-berlin.com/display/PKB/Vulnerability+Release+2.2.0
• SOS Job Scheduler Vulnerability Release
  https://kb.sos-berlin.com/display/PKB/Vulnerability+Release+1.13.10
• SAS Statement Regarding Remote Code Execution Vulnerability (CVE-2021-44228)
  https://support.sas.com/content/support/en/security-bulletins/remote-code-execution-vulnerability-cve-2021-44228.html
• Sammlung betroffener Produkte auf GitHub (NLD Nationaal Cyber Security Centrum)
  https://github.com/NCSC-NL/log4shell/tree/main/software
• Talos Intelligence Blog
  https://blog.talosintelligence.com/2021/12/apache-log4j-rce-vulnerability.html
• Github User "CronUp"
  https://github.com/CronUp/Malware-IOCs/blob/main/2021-12-11_Log4Shell_Botnets
• Atlassian FAQ for CVE-2021-44228 vom 2021-12-12
  https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html
• Siemens Security Advisory SSA-661247 vom 2021-12-13
  https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf
• Unify Security Advisory Report OBSO-2112-01 vom 2021-12-13
  https://networks.unify.com/security/advisories/OBSO-2112-01.pdf
• Juniper Security Advisory JSA11259 vom 2021-12-13
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11259&cat=SIRT_1
• Red Hat Security Advisory RHSA-2021:5094 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5094
• Ubuntu Security Notice USN-5192-1 vom 2021-12-14
  https://ubuntu.com/security/notices/USN-5192-1
• Red Hat Security Advisory RHSA-2021:5140 vom 2021-12-15
  https://access.redhat.com/errata/RHSA-2021:5140
• IBM Security Bulletin 6526174 vom 2021-12-15
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-access-manager-9-0-7-1-and-ibm-security-verify-access-10-0-0-0-may-be-affected-by-the-log4j-vulnerability-cve-2021-44228-2/
• Red Hat Security Advisory RHSA-2021:5137 vom 2021-12-15
  https://access.redhat.com/errata/RHSA-2021:5137
• Red Hat Security Advisory RHSA-2021:5138 vom 2021-12-15
  https://access.redhat.com/errata/RHSA-2021:5138
• WIBU Security Advisory WIBU-211213-01 vom 2021-12-15
  https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-211213-01.pdf
• IBM Security Bulletin 6526274 vom 2021-12-15
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-blockchain-bridge-dependencies-are-vulnerable-to-an-issue-in-apache-log4j-cve-2021-44228/
• IBM Security Bulletin 6526174 vom 2021-12-14
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-access-manager-9-0-7-1-and-ibm-security-verify-access-10-0-0-0-may-be-affected-by-the-log4j-vulnerability-cve-2021-44228/
• IBM Security Bulletin 6526182 vom 2021-12-14
  https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-cve-2021-44228/
• Red Hat Security Advisory RHSA-2021:5093 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5093
• Red Hat Security Advisory RHSA-2021:5108 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5108
• Red Hat Security Advisory RHSA-2021:5126 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5126
• Red Hat Security Advisory RHSA-2021:5129 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5129
• Red Hat Security Advisory RHSA-2021:5132 vom 2021-12-15
  https://access.redhat.com/errata/RHSA-2021:5132
• Red Hat Security Advisory RHSA-2021:5127 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5127
• QNAP Security Advisory QSA-21-58 vom 2021-12-14
  https://www.qnap.com/de-de/security-advisory/QSA-21-58
• Red Hat Security Advisory RHSA-2021:5128 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5128
• Red Hat Security Advisory RHSA-2021:5130 vom 2021-12-14
  https://access.redhat.com/errata/RHSA-2021:5130
• Red Hat Security Advisory RHSA-2021:5133 vom 2021-12-15
  https://access.redhat.com/errata/RHSA-2021:5133
• IBM Security Bulletin 6526184 vom 2021-12-14
  https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-subscription-cve-2021-44228/
• Red Hat Security Advisory RHSA-2021:5134 vom 2021-12-15
  https://access.redhat.com/errata/RHSA-2021:5134
• Apache log4j Security Advisory vom 2021-12-14
  https://logging.apache.org/log4j/2.x/security.html
• IBM Security Bulletin 6527090 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-plus-container-backup-and-restore-for-kubernetes-and-openshift-cve-2021-44228/
• IBM Security Bulletin 6527084 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-operations-center-cve-2021-44228/
• IBM Security Bulletin 6527088 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-security-access-manager-for-enterprise-single-sign-on-cve-2021-44228/
• IBM Security Bulletin 6526640 vom 2021-12-15
  https://www.ibm.com/blogs/psirt/security-bulletin-log4j-as-used-in-ibm-qradar-user-behavior-analytics-application-add-on-to-ibm-qradar-siem-is-vulnerable-to-remote-code-execution-rce-cve-2021-44228/
• Red Hat Security Advisory RHSA-2021:5148 vom 2021-12-16
  https://access.redhat.com/errata/RHSA-2021:5148
• HCL Article KB0095516 vom 2021-12-16
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095516
• IBM Security Bulletin 6526490 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-a-security-vulnerability-has-been-identified-in-websphere-application-server-shipped-with-ibm-websphere-remote-server-cve-2021-44228/
• Ubuntu Security Notice USN-5197-1 vom 2021-12-15
  https://ubuntu.com/security/notices/USN-5197-1
• SUSE Security Update SUSE-SU-2021:4097-1 vom 2021-12-15
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009912.html
• Red Hat Security Advisory RHSA-2021:5106 vom 2021-12-16
  https://access.redhat.com/errata/RHSA-2021:5106
• IBM Security Bulletin 6526462 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-db2-cve-2021-44228/
• SUSE Security Update SUSE-SU-2021:4096-1 vom 2021-12-15
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009911.html
• SAP Support Center
  https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/trust-center/sap-tc-01-5025.pdf
• IBM Security Bulletin 6527080 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-protect-client-web-user-interface-and-ibm-spectrum-protect-for-virtual-environments-cve-2021-44228/
• Amazon Linux Security Advisory ALAS-2021-1730 vom 2021-12-16
  https://alas.aws.amazon.com/AL2/ALAS-2021-1730.html
• IBM Security Bulletin 6527082 vom 2021-12-16
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-vulnerable-to-a-remote-code-execution-vulnerability-in-log4j2-component/
• Debian Security Advisory DSA-5022 vom 2021-12-16
  https://lists.debian.org/debian-security-announce/2021/msg00208.html
• Red Hat Security Advisory RHSA-2021:5107 vom 2021-12-16
  https://access.redhat.com/errata/RHSA-2021:5107
• Red Hat Security Advisory RHSA-2021:5141 vom 2021-12-16
  https://access.redhat.com/errata/RHSA-2021:5141
• Red Hat Security Advisory RHSA-2021:5186 vom 2021-12-17
  https://access.redhat.com/errata/RHSA-2021:5186
• Red Hat Security Advisory RHSA-2021:5183 vom 2021-12-17
  https://access.redhat.com/errata/RHSA-2021:5183
• Red Hat Security Advisory RHSA-2021:5184 vom 2021-12-17
  https://access.redhat.com/errata/RHSA-2021:5184