Back to the CVE list
CVE-2017-5645Suited to automated attack · CISA

Vulnerability in Apache Log4j

CVSS score

9.8

EPSS probability

%89.8

Risk score

8.8

Published

9 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2017-5645 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2017-5645 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Apache Software FoundationApache Log4j View
2apachelog4j View
3netapponcommand api services View
4netapponcommand insight View
5netapponcommand workflow automation View
6netappservice level manager View
7netappsnapcenter View
8netappstorage automation store View
9redhatfuse View
10redhatenterprise linux View
11redhatenterprise linux View
12redhatenterprise linux View
13redhatenterprise linux View
14redhatenterprise linux View
15redhatenterprise linux View
16redhatenterprise linux View
17redhatenterprise linux desktop View
18redhatenterprise linux server View
19redhatenterprise linux server aus View
20redhatenterprise linux server aus View
21redhatenterprise linux server eus View
22redhatenterprise linux server eus View
23redhatenterprise linux server eus View
24redhatenterprise linux server tus View
25redhatenterprise linux server tus View
26redhatenterprise linux workstation View
27oracleapi gateway View
28oracleapplication testing suite View
29oracleautovue vuelink integration View
30oracleautovue vuelink integration View
31oraclebanking platform View
32oraclebanking platform View
33oraclebanking platform View
34oraclebi publisher View
35oraclebi publisher View
36oraclebi publisher View
37oraclebi publisher View
38oraclecommunications converged application server - service controller View
39oraclecommunications instant messaging server View
40oraclecommunications interactive session recorder View
41oraclecommunications messaging server View
42oraclecommunications network integrity View
43oraclecommunications online mediation controller View
44oraclecommunications pricing design center View
45oraclecommunications pricing design center View
46oraclecommunications service broker View
47oraclecommunications webrtc session controller View
48oracleconfiguration manager View
49oracleconfiguration manager View
50oracleendeca information discovery studio View
51oracleenterprise data quality View
52oracleenterprise manager base platform View
53oracleenterprise manager base platform View
54oracleenterprise manager for fusion middleware View
55oracleenterprise manager for fusion middleware View
56oracleenterprise manager for mysql database View
57oracleenterprise manager for oracle database View
58oracleenterprise manager for oracle database View
59oracleenterprise manager for peoplesoft View
60oracleenterprise manager for peoplesoft View
61oraclefinancial services analytical applications infrastructure View
62oraclefinancial services analytical applications infrastructure View
63oraclefinancial services behavior detection platform View
64oraclefinancial services behavior detection platform View
65oraclefinancial services hedge management and ifrs valuations View
66oraclefinancial services hedge management and ifrs valuations View
67oraclefinancial services lending and leasing View
68oraclefinancial services lending and leasing View
69oraclefinancial services loan loss forecasting and provisioning View
70oraclefinancial services loan loss forecasting and provisioning View
71oraclefinancial services profitability management View
72oraclefinancial services profitability management View
73oraclefinancial services regulatory reporting with agilereporter View
74oracleflexcube investor servicing View
75oracleflexcube investor servicing View
76oracleflexcube investor servicing View
77oracleflexcube investor servicing View
78oracleflexcube investor servicing View
79oraclefusion middleware mapviewer View
80oraclefusion middleware mapviewer View
81oraclegoldengate View
82oraclegoldengate application adapters View
83oracleidentity analytics View
84oracleidentity management suite View
85oracleidentity management suite View
86oracleidentity manager connector View
87oraclein-memory performance-driven planning View
88oraclein-memory performance-driven planning View
89oracleinstantis enterprisetrack View
90oracleinsurance calculation engine View
91oracleinsurance calculation engine View
92oracleinsurance policy administration View
93oracleinsurance policy administration View
94oracleinsurance policy administration View
95oracleinsurance policy administration View
96oracleinsurance rules palette View
97oracleinsurance rules palette View
98oracleinsurance rules palette View
99oracleinsurance rules palette View
100oracleinsurance rules palette View
101oraclejd edwards enterpriseone tools View
102oraclejd edwards enterpriseone tools View
103oraclejdeveloper View
104oraclejdeveloper View
105oraclejdeveloper View
106oraclemysql enterprise monitor View
107oraclemysql enterprise monitor View
108oraclemysql enterprise monitor View
109oraclepeoplesoft enterprise fin install View
110oraclepolicy automation View
111oraclepolicy automation View
112oraclepolicy automation View
113oraclepolicy automation View
114oraclepolicy automation View
115oraclepolicy automation View
116oraclepolicy automation View
117oraclepolicy automation View
118oraclepolicy automation View
119oraclepolicy automation View
120oraclepolicy automation View
121oraclepolicy automation View
122oraclepolicy automation View
123oraclepolicy automation View
124oraclepolicy automation connector for siebel View
125oraclepolicy automation for mobile devices View
126oraclepolicy automation for mobile devices View
127oraclepolicy automation for mobile devices View
128oraclepolicy automation for mobile devices View
129oraclepolicy automation for mobile devices View
130oraclepolicy automation for mobile devices View
131oraclepolicy automation for mobile devices View
132oraclepolicy automation for mobile devices View
133oraclepolicy automation for mobile devices View
134oraclepolicy automation for mobile devices View
135oraclepolicy automation for mobile devices View
136oraclepolicy automation for mobile devices View
137oraclepolicy automation for mobile devices View
138oraclepolicy automation for mobile devices View
139oracleprimavera gateway View
140oracleprimavera gateway View
141oraclerapid planning View
142oraclerapid planning View
143oracleretail advanced inventory planning View
144oracleretail advanced inventory planning View
145oracleretail clearance optimization engine View
146oracleretail extract transform and load View
147oracleretail extract transform and load View
148oracleretail extract transform and load View
149oracleretail extract transform and load View
150oracleretail integration bus View
151oracleretail integration bus View
152oracleretail integration bus View
153oracleretail integration bus View
154oracleretail open commerce platform View
155oracleretail open commerce platform View
156oracleretail open commerce platform View
157oracleretail predictive application server View
158oracleretail service backbone View
159oracleretail service backbone View
160oracleretail service backbone View
161oraclesiebel ui framework View
162oraclesiebel ui framework View
163oraclesiebel ui framework View
164oraclesoa suite View
165oraclesoa suite View
166oraclesoa suite View
167oracletape library acsls View
168oracletimesten in-memory database View
169oracleutilities advanced spatial and operational analytics View
170oracleutilities work and asset management View
171oracleweblogic server View
172oracleweblogic server View
173oracleweblogic server View
174oracleweblogic server View
175oracleweblogic server View
Total affected vendors: 5|Products: 175

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
9.8CVSS V31CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD
7.5CVSS V2—AV:N/AC:L/Au:N/C:P/I:P/A:PNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

8 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2017-5645 is associated with the following CWEs:

CWE-502: Deserialization of Untrusted Data

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2017-5645 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

RHSA-2017:2888vendor-advisoryRHSA-2017:2809vendor-advisory97702vendor-advisory1041294vendor-advisoryRHSA-2017:2810vendor-advisoryRHSA-2017:1801vendor-advisoryRHSA-2017:2889vendor-advisoryRHSA-2017:2635vendor-advisoryRHSA-2017:2638vendor-advisoryRHSA-2017:1417vendor-advisory

CVSS Vector Radar Chart

9.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

8 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

AS
Apache Software Foundation logo
Apache Software Foundation
A
apache logo
apache
N
netapp logo
netapp
R
redhat logo
redhat
O
oracle logo
oracle

Weakness Type (CWE & CAPEC)

CWE-502

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2017-5645"