org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade slf4jUpgrade slf4j-javadocUpgrade slf4j-manual | Apr 27, 2020 | Mar 20, 2018 |
| Centos_linux | — | Upgrade slf4j-javadocUpgrade slf4j-manualUpgrade slf4j | Mar 29, 2018 | Mar 20, 2018 |
| Debian | — | Upgrade libslf4j-java | Jul 30, 2024 | Mar 20, 2018 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Huawei Euleros 2_0_sp1 | — | Upgrade slf4j | May 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slf4j | May 2, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade slf4j | Jun 28, 2018 | Mar 20, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0. | Feb 28, 2022 | Mar 20, 2018 |
| Oracle_linux | — | Upgrade slf4j-manualUpgrade slf4jUpgrade slf4j-javadoc | Mar 27, 2018 | Feb 22, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 22, 2018 |
| Red_hat Jboss_eap | — | — | Nov 14, 2019 | Mar 20, 2018 |
| Redhat_linux | — | Upgrade slf4j-javadocUpgrade slf4jUpgrade slf4j-manualNo solution exists | Mar 27, 2018 | Mar 20, 2018 |
| Suse | — | Upgrade jul-to-slf4jUpgrade log4j-over-slf4jUpgrade jcl-over-slf4jUpgrade slf4j-javadocUpgrade slf4j-manualUpgrade slf4j | Jun 10, 2018 | Mar 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub