RHSA-2022:0083MediumCVSS 8.1
Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.1.8 security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2021-44832 — log4j-core: remote code execution via JDBC Appender CVE-2021-45046 — log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228) CVE-2021-45105 — log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2022:0083
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=catRhoar.eclipse.vertx&version=4.1.8
- externalhttps://access.redhat.com/documentation/en-us/red_hat_build_of_eclipse_vert.x/4.1/html/release_notes_for_eclipse_vert.x_4.1/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2032580
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2034067
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2035951
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0083.json