The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade log4j-manualUpgrade log4jUpgrade log4j-javadoc | Aug 24, 2023 | Dec 20, 2019 |
| Amazon_linux | — | Upgrade log4j | Jan 20, 2022 | Dec 20, 2019 |
| Centos_linux | — | Upgrade log4j-manualUpgrade log4j-javadocUpgrade log4j-debuginfoUpgrade log4j | Dec 30, 2019 | Dec 20, 2019 |
| Debian | — | Upgrade apache-log4j1.2 | Jan 14, 2020 | Dec 20, 2019 |
| Gentoo Linux | — | Upgrade dev-java/log4j. | Feb 19, 2024 | Dec 20, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 29659185 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 30965714 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30857795 for version 12.1.3.0.0. | Apr 15, 2020 | Dec 20, 2019 |
| Oracle_linux | — | Upgrade log4j-manualUpgrade log4jUpgrade log4j-javadoc | Jan 21, 2026 | Dec 20, 2019 |
| Progress Moveit Automation | — | Upgrade Progress MOVEit Automation to the latest version | Dec 13, 2024 | Dec 20, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Dec 20, 2019 |
| Redhat_linux | — | No solution existsUpgrade log4j-javadocUpgrade log4jUpgrade log4j-debuginfoUpgrade log4j-manual | Dec 30, 2019 | Dec 20, 2019 |
| Suse | — | Upgrade log4j-miniUpgrade log4j12-manualUpgrade log4jUpgrade log4j12Upgrade log4j-manualUpgrade log4j12-javadocUpgrade log4j-javadoc | Jan 10, 2020 | Dec 20, 2019 |
| Ubuntu | — | Upgrade liblog4j1.2-java (Ubuntu Pro)Upgrade liblog4j1.2-java | Sep 16, 2020 | Dec 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub