CVE-2017-5645Otomatik saldırıya uygun · CISA
Vulnerability in Apache Log4j
CVSS Skor
9.8
EPSS İhtimal
%89.8
Risk Skoru
8.8
Yayın
9 yıl önce
Resmî yama doğrulandı
Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.
Envanterimdeki Etkisi
Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.
Oturum kontrol ediliyor…
Zafiyet Açıklaması
DayBreach CVE AI Araştırması
CVE-2017-5645 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
IMPACT — Etkilenen Ürünler ve Yazılımlar
Affected Products
The following products are affected by CVE-2017-5645 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | Apache Software Foundation | Apache Log4j | İncele |
| 2 | apache | log4j | İncele |
| 3 | netapp | oncommand api services | İncele |
| 4 | netapp | oncommand insight | İncele |
| 5 | netapp | oncommand workflow automation | İncele |
| 6 | netapp | service level manager | İncele |
| 7 | netapp | snapcenter | İncele |
| 8 | netapp | storage automation store | İncele |
| 9 | redhat | fuse | İncele |
| 10 | redhat | enterprise linux | İncele |
| 11 | redhat | enterprise linux | İncele |
| 12 | redhat | enterprise linux | İncele |
| 13 | redhat | enterprise linux | İncele |
| 14 | redhat | enterprise linux | İncele |
| 15 | redhat | enterprise linux | İncele |
| 16 | redhat | enterprise linux | İncele |
| 17 | redhat | enterprise linux desktop | İncele |
| 18 | redhat | enterprise linux server | İncele |
| 19 | redhat | enterprise linux server aus | İncele |
| 20 | redhat | enterprise linux server aus | İncele |
| 21 | redhat | enterprise linux server eus | İncele |
| 22 | redhat | enterprise linux server eus | İncele |
| 23 | redhat | enterprise linux server eus | İncele |
| 24 | redhat | enterprise linux server tus | İncele |
| 25 | redhat | enterprise linux server tus | İncele |
| 26 | redhat | enterprise linux workstation | İncele |
| 27 | oracle | api gateway | İncele |
| 28 | oracle | application testing suite | İncele |
| 29 | oracle | autovue vuelink integration | İncele |
| 30 | oracle | autovue vuelink integration | İncele |
| 31 | oracle | banking platform | İncele |
| 32 | oracle | banking platform | İncele |
| 33 | oracle | banking platform | İncele |
| 34 | oracle | bi publisher | İncele |
| 35 | oracle | bi publisher | İncele |
| 36 | oracle | bi publisher | İncele |
| 37 | oracle | bi publisher | İncele |
| 38 | oracle | communications converged application server - service controller | İncele |
| 39 | oracle | communications instant messaging server | İncele |
| 40 | oracle | communications interactive session recorder | İncele |
| 41 | oracle | communications messaging server | İncele |
| 42 | oracle | communications network integrity | İncele |
| 43 | oracle | communications online mediation controller | İncele |
| 44 | oracle | communications pricing design center | İncele |
| 45 | oracle | communications pricing design center | İncele |
| 46 | oracle | communications service broker | İncele |
| 47 | oracle | communications webrtc session controller | İncele |
| 48 | oracle | configuration manager | İncele |
| 49 | oracle | configuration manager | İncele |
| 50 | oracle | endeca information discovery studio | İncele |
| 51 | oracle | enterprise data quality | İncele |
| 52 | oracle | enterprise manager base platform | İncele |
| 53 | oracle | enterprise manager base platform | İncele |
| 54 | oracle | enterprise manager for fusion middleware | İncele |
| 55 | oracle | enterprise manager for fusion middleware | İncele |
| 56 | oracle | enterprise manager for mysql database | İncele |
| 57 | oracle | enterprise manager for oracle database | İncele |
| 58 | oracle | enterprise manager for oracle database | İncele |
| 59 | oracle | enterprise manager for peoplesoft | İncele |
| 60 | oracle | enterprise manager for peoplesoft | İncele |
| 61 | oracle | financial services analytical applications infrastructure | İncele |
| 62 | oracle | financial services analytical applications infrastructure | İncele |
| 63 | oracle | financial services behavior detection platform | İncele |
| 64 | oracle | financial services behavior detection platform | İncele |
| 65 | oracle | financial services hedge management and ifrs valuations | İncele |
| 66 | oracle | financial services hedge management and ifrs valuations | İncele |
| 67 | oracle | financial services lending and leasing | İncele |
| 68 | oracle | financial services lending and leasing | İncele |
| 69 | oracle | financial services loan loss forecasting and provisioning | İncele |
| 70 | oracle | financial services loan loss forecasting and provisioning | İncele |
| 71 | oracle | financial services profitability management | İncele |
| 72 | oracle | financial services profitability management | İncele |
| 73 | oracle | financial services regulatory reporting with agilereporter | İncele |
| 74 | oracle | flexcube investor servicing | İncele |
| 75 | oracle | flexcube investor servicing | İncele |
| 76 | oracle | flexcube investor servicing | İncele |
| 77 | oracle | flexcube investor servicing | İncele |
| 78 | oracle | flexcube investor servicing | İncele |
| 79 | oracle | fusion middleware mapviewer | İncele |
| 80 | oracle | fusion middleware mapviewer | İncele |
| 81 | oracle | goldengate | İncele |
| 82 | oracle | goldengate application adapters | İncele |
| 83 | oracle | identity analytics | İncele |
| 84 | oracle | identity management suite | İncele |
| 85 | oracle | identity management suite | İncele |
| 86 | oracle | identity manager connector | İncele |
| 87 | oracle | in-memory performance-driven planning | İncele |
| 88 | oracle | in-memory performance-driven planning | İncele |
| 89 | oracle | instantis enterprisetrack | İncele |
| 90 | oracle | insurance calculation engine | İncele |
| 91 | oracle | insurance calculation engine | İncele |
| 92 | oracle | insurance policy administration | İncele |
| 93 | oracle | insurance policy administration | İncele |
| 94 | oracle | insurance policy administration | İncele |
| 95 | oracle | insurance policy administration | İncele |
| 96 | oracle | insurance rules palette | İncele |
| 97 | oracle | insurance rules palette | İncele |
| 98 | oracle | insurance rules palette | İncele |
| 99 | oracle | insurance rules palette | İncele |
| 100 | oracle | insurance rules palette | İncele |
| 101 | oracle | jd edwards enterpriseone tools | İncele |
| 102 | oracle | jd edwards enterpriseone tools | İncele |
| 103 | oracle | jdeveloper | İncele |
| 104 | oracle | jdeveloper | İncele |
| 105 | oracle | jdeveloper | İncele |
| 106 | oracle | mysql enterprise monitor | İncele |
| 107 | oracle | mysql enterprise monitor | İncele |
| 108 | oracle | mysql enterprise monitor | İncele |
| 109 | oracle | peoplesoft enterprise fin install | İncele |
| 110 | oracle | policy automation | İncele |
| 111 | oracle | policy automation | İncele |
| 112 | oracle | policy automation | İncele |
| 113 | oracle | policy automation | İncele |
| 114 | oracle | policy automation | İncele |
| 115 | oracle | policy automation | İncele |
| 116 | oracle | policy automation | İncele |
| 117 | oracle | policy automation | İncele |
| 118 | oracle | policy automation | İncele |
| 119 | oracle | policy automation | İncele |
| 120 | oracle | policy automation | İncele |
| 121 | oracle | policy automation | İncele |
| 122 | oracle | policy automation | İncele |
| 123 | oracle | policy automation | İncele |
| 124 | oracle | policy automation connector for siebel | İncele |
| 125 | oracle | policy automation for mobile devices | İncele |
| 126 | oracle | policy automation for mobile devices | İncele |
| 127 | oracle | policy automation for mobile devices | İncele |
| 128 | oracle | policy automation for mobile devices | İncele |
| 129 | oracle | policy automation for mobile devices | İncele |
| 130 | oracle | policy automation for mobile devices | İncele |
| 131 | oracle | policy automation for mobile devices | İncele |
| 132 | oracle | policy automation for mobile devices | İncele |
| 133 | oracle | policy automation for mobile devices | İncele |
| 134 | oracle | policy automation for mobile devices | İncele |
| 135 | oracle | policy automation for mobile devices | İncele |
| 136 | oracle | policy automation for mobile devices | İncele |
| 137 | oracle | policy automation for mobile devices | İncele |
| 138 | oracle | policy automation for mobile devices | İncele |
| 139 | oracle | primavera gateway | İncele |
| 140 | oracle | primavera gateway | İncele |
| 141 | oracle | rapid planning | İncele |
| 142 | oracle | rapid planning | İncele |
| 143 | oracle | retail advanced inventory planning | İncele |
| 144 | oracle | retail advanced inventory planning | İncele |
| 145 | oracle | retail clearance optimization engine | İncele |
| 146 | oracle | retail extract transform and load | İncele |
| 147 | oracle | retail extract transform and load | İncele |
| 148 | oracle | retail extract transform and load | İncele |
| 149 | oracle | retail extract transform and load | İncele |
| 150 | oracle | retail integration bus | İncele |
| 151 | oracle | retail integration bus | İncele |
| 152 | oracle | retail integration bus | İncele |
| 153 | oracle | retail integration bus | İncele |
| 154 | oracle | retail open commerce platform | İncele |
| 155 | oracle | retail open commerce platform | İncele |
| 156 | oracle | retail open commerce platform | İncele |
| 157 | oracle | retail predictive application server | İncele |
| 158 | oracle | retail service backbone | İncele |
| 159 | oracle | retail service backbone | İncele |
| 160 | oracle | retail service backbone | İncele |
| 161 | oracle | siebel ui framework | İncele |
| 162 | oracle | siebel ui framework | İncele |
| 163 | oracle | siebel ui framework | İncele |
| 164 | oracle | soa suite | İncele |
| 165 | oracle | soa suite | İncele |
| 166 | oracle | soa suite | İncele |
| 167 | oracle | tape library acsls | İncele |
| 168 | oracle | timesten in-memory database | İncele |
| 169 | oracle | utilities advanced spatial and operational analytics | İncele |
| 170 | oracle | utilities work and asset management | İncele |
| 171 | oracle | weblogic server | İncele |
| 172 | oracle | weblogic server | İncele |
| 173 | oracle | weblogic server | İncele |
| 174 | oracle | weblogic server | İncele |
| 175 | oracle | weblogic server | İncele |
RED HAT CSAF/VEX — Ürün Etki Kontrolü
Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.
SCORING — CVSS Çoklu Kaynak Skoru
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 9.8 | CVSS V31 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD |
| 7.5 | CVSS V2 | — | AV:N/AC:L/Au:N/C:P/I:P/A:P | NVD |
Yama ve İyileştirme Rehberi (Solution)
Solution & Remediation Advisory
8 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.
Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.
Public exploit ve aktif sömürü durumu
Doğrulanmış exploit istihbaratı
Bu CVE için henüz doğrulanmış public PoC, exploit repository’si veya Metasploit modülü bulunamadı.
Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2017-5645 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2017-5645 weaknesses.
Saldırı Vektörü ve Erişilebilirlik Karakteristiği
ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor
Resmi Kaynaklar ve Danışma Bültenleri
CVSS Vektör Radar Grafiği
9.8 / 10Vulnerability Scoring Details
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNetwork (Ağ)
Low (Düşük)
None (Gerekmiyor)
None (Gerekmiyor)
Low (Düşük)
None (Yok)
High (Yüksek)
Yama doğrulandı
Zafiyet Türü (CWE & CAPEC)
İlgili Benzer Açıklar
10.0
CVE-2021-44228 Aktif sömürülüyor
Improper input validation in Apache Log4j
S
Yama doğrulandıEPSS %100
9.8
CVE-2017-5638 Aktif sömürülüyor
struts2: RCE when performing file upload based on Jakarta Multipart parser
A
Geçici çözümEPSS %100
9.8
CVE-2018-11776 Aktif sömürülüyor
struts2: Using specific results and namespaces can result in a remote code execution
A
Geçici çözümEPSS %100
9.8
CVE-2023-46604 Aktif sömürülüyor
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
RH
Kısmi yamaEPSS %100
9.8
CVE-2025-61882 Aktif sömürülüyor
Improper authentication in Oracle Corporation Oracle Concurrent Processing
OC
Geçici çözümEPSS %100
9.8
CVE-2020-1938 Aktif sömürülüyor
Vulnerability in Apache Tomcat
A
Yama doğrulandıEPSS %99
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2017-5645"