File: cve-map.md

package info (click to toggle)
apache-log4j2 2.17.1-1~deb11u1
  • links: PTS, VCS
  • area: main
  • in suites: bullseye
  • size: 21,328 kB
  • sloc: java: 174,836; xml: 26,222; sh: 97; jsp: 21; javascript: 7; makefile: 5
file content (15 lines) | stat: -rw-r--r-- 990 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
This is a map of CVEs and Log4j *2* Versions.

| CVE            | Affects   | Fixed In | Java Required |
| -------------- | --------- | --------------- | --- |
| CVE-2021-45105 | 2.0-beta9 to 2.16.0, excluding 2.12.3         | 2.17.0<br>2.12.3<br>2.3.1 | Java 8<br>Java 7<br>Java 6 |
| CVE-2021-45046 | 2.0-beta9 to 2.15.0, excluding 2.12.2         | 2.16.0<br>2.12.2<br>2.3.1 | Java 8<br>Java 7<br>Java 6 |
| CVE-2021-44228 | 2.0-beta9 to 2.16.0, excluding 2.12.3 & 2.3.1 | 2.17.0<br>2.12.3<br>2.3.1 | Java 8<br>Java 7<br>Java 6 |
| CVE-2020-9488  | 2.0-alpha1 to 2.13.1                          | 2.13.2<br>2.12.3          | Java 8<br>Java 7 |
| CVE-2017-5645  | 2.0-alpha1 to 2.8.1                           | 2.8.2                     | Java 7 |

This is a map of CVEs and Log4j *1* End-of-Life Versions.

| CVE            | Affects   | Fixed In | Java Required |
| -------------- | --------- | --------------- | --- |
| CVE-2019-17571 | 1.2 to 1.2.17         | Not fixed | Not fixed |