Package · Maven

ch.qos.logback:logback-classic

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.1

CVE-2023-6378

Logback "receiver" DOS vulnerability

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

QOS.CH Sarl logback trino tez Debian Ubuntu Wolfi Maven

Nov 29, 2023
Critical 9.8

CVE-2017-5929

QOS.ch Logback vulnerable to Deserialization of Untrusted Data

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

logback logback ch.qos.logback:logback-core ch.qos.logback:logback-classic Debian Ubuntu Maven

Mar 13, 2017