Archive

18 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /18 January 2022 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.9

CVE-2021-45105 Public exploit EPSS 100%

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a craf…

Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven

Dec 18, 2021