Red Hat Enterprise Linux 7/log4j
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Log4j does not verify the TLS hostname in its Socket Appender | org.apache.logging.log4j:log4j-coreLogging Subsystem for Red Hat OpenShift/log4j-core | MavenRed Hat | Medium | Fix reported | |
| Improper validation of certificate with host mismatch in Apache Log4j SMTP appender | org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j | MavenRed Hat | Low | Fix reported | |
| Apache Log4j 1.x (EOL) allows Denial of Service (DoS) | log4j:log4jorg.apache.logging.log4j:log4j-core | MavenRed Hat | High | Fix reported |