CVE-2017-5645

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@apache.org

Published

2017-04-17

Last modified

2026-10-08

Weaknesses

CWE-502

Affected products

• Log4j (Apache)
• Apache Log4j (Apache Software Foundation)
• Oncommand Api Services (Netapp)
• Oncommand Insight (Netapp)
• Oncommand Workflow Automation (Netapp)
• Service Level Manager (Netapp)
• Snapcenter (Netapp)
• Storage Automation Store (Netapp)
• Api Gateway (Oracle)
• Application Testing Suite (Oracle)
• Autovue Vuelink Integration (Oracle)
• Banking Platform (Oracle)
• Bi Publisher (Oracle)
• Communications Converged Application Server - Service Controller (Oracle)
• Communications Instant Messaging Server (Oracle)
• Communications Interactive Session Recorder (Oracle)
• Communications Messaging Server (Oracle)
• Communications Network Integrity (Oracle)
• Communications Online Mediation Controller (Oracle)
• Communications Pricing Design Center (Oracle)
• Communications Service Broker (Oracle)
• Communications Webrtc Session Controller (Oracle)
• Configuration Manager (Oracle)
• Endeca Information Discovery Studio (Oracle)
• Enterprise Data Quality (Oracle)
• Enterprise Manager Base Platform (Oracle)
• Enterprise Manager For Fusion Middleware (Oracle)
• Enterprise Manager For Mysql Database (Oracle)
• Enterprise Manager For Oracle Database (Oracle)
• Enterprise Manager For Peoplesoft (Oracle)
• Financial Services Analytical Applications Infrastructure (Oracle)
• Financial Services Behavior Detection Platform (Oracle)
• Financial Services Hedge Management And Ifrs Valuations (Oracle)
• Financial Services Lending And Leasing (Oracle)
• Financial Services Loan Loss Forecasting And Provisioning (Oracle)
• Financial Services Profitability Management (Oracle)
• Financial Services Regulatory Reporting With Agilereporter (Oracle)
• Flexcube Investor Servicing (Oracle)
• Fusion Middleware Mapviewer (Oracle)
• Goldengate (Oracle)
• Goldengate Application Adapters (Oracle)
• Identity Analytics (Oracle)
• Identity Management Suite (Oracle)
• Identity Manager Connector (Oracle)
• In-memory Performance-driven Planning (Oracle)
• Instantis Enterprisetrack (Oracle)
• Insurance Calculation Engine (Oracle)
• Insurance Policy Administration (Oracle)
• Insurance Rules Palette (Oracle)
• Jd Edwards Enterpriseone Tools (Oracle)
• Jdeveloper (Oracle)
• Mysql Enterprise Monitor (Oracle)
• Peoplesoft Enterprise Fin Install (Oracle)
• Policy Automation (Oracle)
• Policy Automation Connector For Siebel (Oracle)
• Policy Automation For Mobile Devices (Oracle)
• Primavera Gateway (Oracle)
• Rapid Planning (Oracle)
• Retail Advanced Inventory Planning (Oracle)
• Retail Clearance Optimization Engine (Oracle)
• Retail Extract Transform And Load (Oracle)
• Retail Integration Bus (Oracle)
• Retail Open Commerce Platform (Oracle)
• Retail Predictive Application Server (Oracle)
• Retail Service Backbone (Oracle)
• Siebel Ui Framework (Oracle)
• Soa Suite (Oracle)
• Tape Library Acsls (Oracle)
• Timesten In-memory Database (Oracle)
• Utilities Advanced Spatial And Operational Analytics (Oracle)
• Utilities Work And Asset Management (Oracle)
• Weblogic Server (Oracle)
• Enterprise Linux (Redhat)
• Enterprise Linux Desktop (Redhat)
• Enterprise Linux Server (Redhat)
• Enterprise Linux Server Aus (Redhat)
• Enterprise Linux Server Eus (Redhat)
• Enterprise Linux Server Tus (Redhat)
• Enterprise Linux Workstation (Redhat)
• Fuse (Redhat)

References

• https://access.redhat.com/errata/RHSA-2017:2888
• https://access.redhat.com/errata/RHSA-2017:2809
• http://www.securityfocus.com/bid/97702
• http://www.securitytracker.com/id/1041294
• https://access.redhat.com/errata/RHSA-2017:2810
• https://access.redhat.com/errata/RHSA-2017:1801
• https://access.redhat.com/errata/RHSA-2017:2889
• https://access.redhat.com/errata/RHSA-2017:2635
• https://access.redhat.com/errata/RHSA-2017:2638
• https://access.redhat.com/errata/RHSA-2017:1417
• https://access.redhat.com/errata/RHSA-2017:2423
• https://access.redhat.com/errata/RHSA-2017:2808
• http://www.securitytracker.com/id/1040200
• https://access.redhat.com/errata/RHSA-2017:2636
• https://access.redhat.com/errata/RHSA-2017:3399
• https://access.redhat.com/errata/RHSA-2017:2637
• https://access.redhat.com/errata/RHSA-2017:3244
• https://access.redhat.com/errata/RHSA-2017:3400
• https://access.redhat.com/errata/RHSA-2017:2633
• https://access.redhat.com/errata/RHSA-2017:2811
• https://access.redhat.com/errata/RHSA-2017:1802
• https://access.redhat.com/errata/RHSA-2019:1545
• https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache…
• https://lists.apache.org/thread.html/e8fb7d76a244ee997ba4b217d6171227f7c2521af8c7c5b16cba27bc%40%3Cdev.logging.apache.o…
• https://lists.apache.org/thread.html/eea03d504b36e8f870e8321d908e1def1addda16adda04327fe7c125%40%3Cdev.logging.apache.o…
• http://www.openwall.com/lists/oss-security/2019/12/19/2
• https://lists.apache.org/thread.html/84cc4266238e057b95eb95dfd8b29d46a2592e7672c12c92f68b2917%40%3Cannounce.apache.org%…
• https://lists.apache.org/thread.html/0dcca05274d20ef2d72584edcf8c917bbb13dbbd7eb35cae909d02e9%40%3Cdev.logging.apache.o…
• https://lists.apache.org/thread.html/8ab32b4c9f1826f20add7c40be08909de9f58a89dc1de9c09953f5ac%40%3Cissues.activemq.apac…
• https://lists.apache.org/thread.html/44491fb9cc19acc901f7cff34acb7376619f15638439416e3e14761c%40%3Cdev.tika.apache.org%…