CVE-2018-8088
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2018-03-20
- Last modified
- 2024-08-05
Affected products
- Goldengate Application Adapters (Oracle)
- Goldengate Stream Analytics (Oracle)
- Utilities Framework (Oracle)
- Slf4j (Qos)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Eus (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Server Aus (Redhat)
- Enterprise Linux Server Tus (Redhat)
- Enterprise Linux Workstation (Redhat)
- Jboss Enterprise Application Platform (Redhat)
- Virtualization (Redhat)
- Virtualization Host (Redhat)
References
- http://www.securityfocus.com/bid/103737
- http://www.securitytracker.com/id/1040627
- https://access.redhat.com/errata/RHSA-2018:0582
- https://access.redhat.com/errata/RHSA-2018:0592
- https://access.redhat.com/errata/RHSA-2018:0627
- https://access.redhat.com/errata/RHSA-2018:0628
- https://access.redhat.com/errata/RHSA-2018:0629
- https://access.redhat.com/errata/RHSA-2018:0630
- https://access.redhat.com/errata/RHSA-2018:1247
- https://access.redhat.com/errata/RHSA-2018:1248
- https://access.redhat.com/errata/RHSA-2018:1249
- https://access.redhat.com/errata/RHSA-2018:1251
- https://access.redhat.com/errata/RHSA-2018:1323
- https://access.redhat.com/errata/RHSA-2018:1447
- https://access.redhat.com/errata/RHSA-2018:1448
- https://access.redhat.com/errata/RHSA-2018:1449
- https://access.redhat.com/errata/RHSA-2018:1450
- https://access.redhat.com/errata/RHSA-2018:1451
- https://access.redhat.com/errata/RHSA-2018:1525
- https://access.redhat.com/errata/RHSA-2018:1575
- https://access.redhat.com/errata/RHSA-2018:2143
- https://access.redhat.com/errata/RHSA-2018:2419
- https://access.redhat.com/errata/RHSA-2018:2420
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2018:2930
- https://access.redhat.com/errata/RHSA-2019:2413
- https://access.redhat.com/errata/RHSA-2019:3140
- https://github.com/qos-ch/slf4j/commit/d2b27fba88e983f921558da27fc29b5f5d269405
- https://jira.qos.ch/browse/SLF4J-430
- https://jira.qos.ch/browse/SLF4J-431
