Qos

Logback

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-6481

  • EPSS 0.31%
  • Published 04.12.2023 09:15:37
  • Last modified 21.11.2024 08:43:56

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

7.5

CVE-2023-6378

  • EPSS 0.65%
  • Published 29.11.2023 12:15:07
  • Last modified 29.11.2024 12:15:06

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

8.5

CVE-2021-42550

Exploit
  • EPSS 4.29%
  • Published 16.12.2021 19:15:08
  • Last modified 21.11.2024 06:27:47

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

9.8

CVE-2017-5929

  • EPSS 16.01%
  • Published 13.03.2017 06:59:00
  • Last modified 20.04.2025 01:37:25

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.