Security Advisory

CVE-2017-5645

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-17 21:00:00

Last updated 2024-08-05 15:11:47

Assigner apache

CVSS score not scored

State PUBLISHED

Description

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

← Browse all CVEs View on cve.org ↗