=========================================================================
\nUbuntu Security Notice USN-5998-1
\nApril 05, 2023<\/p>\n
apache-log4j1.2 vulnerabilities
\n=========================================================================
\nA security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 20.04 LTS
\n– Ubuntu 18.04 LTS
\n– Ubuntu 16.04 ESM<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in Apache Log4j.<\/p>\n
Software Description:
\n– apache-log4j1.2: Java-based open-source logging tool<\/p>\n
Details:<\/p>\n
It was discovered that the SocketServer component of Apache Log4j 1.2
\nincorrectly handled deserialization. An attacker could possibly use this issue
\nto execute arbitrary code. This issue only affected Ubuntu 16.04 ESM.
\n(CVE-2019-17571)<\/p>\n
It was discovered that the JMSSink component of Apache Log4j 1.2 incorrectly
\nhandled deserialization. An attacker could possibly use this issue to execute
\narbitrary code. (CVE-2022-23302)<\/p>\n
It was discovered that Apache Log4j 1.2 incorrectly handled certain SQL
\nstatements. A remote attacker could possibly use this issue to perform an SQL
\ninjection attack and alter the database. This issue was only fixed in Ubuntu
\n18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-23305)<\/p>\n
It was discovered that the Chainsaw component of Apache Log4j 1.2 incorrectly
\nhandled deserialization. An attacker could possibly use this issue to execute
\narbitrary code. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04
\nLTS. (CVE-2022-23307)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 20.04 LTS:
\nliblog4j1.2-java 1.2.17-9ubuntu0.2<\/p>\n
Ubuntu 18.04 LTS:
\nliblog4j1.2-java 1.2.17-8+deb10u1ubuntu0.2<\/p>\n
Ubuntu 16.04 ESM:
\nliblog4j1.2-java 1.2.17-7ubuntu1+esm1<\/p>\n
In general, a standard system update will make all the necessary changes.<\/p>\n
References:
\nhttps:\/\/ubuntu.com\/security\/notices\/USN-5998-1
\nCVE-2019-17571, CVE-2022-23302, CVE-2022-23305, CVE-2022-23307<\/p>\n
Package Information:
\nhttps:\/\/launchpad.net\/ubuntu\/+source\/apache-log4j1.2\/1.2.17-9ubuntu0.2
\nhttps:\/\/launchpad.net\/ubuntu\/+source\/apache-log4j1.2\/1.2.17-8+deb10u1ubuntu0.2<\/p>\n","protected":false},"excerpt":{"rendered":"
========================================================================= Ubuntu Security Notice USN-5998-1 April 05, 2023 apache-log4j1.2 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 20.04 LTS – Ubuntu 18.04 LTS – Ubuntu 16.04 ESM Summary: Several security issues were fixed in Apache Log4j. Software Description: – apache-log4j1.2: Java-based open-source logging tool Details: It was discovered …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-40004","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40004","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=40004"}],"version-history":[{"count":2,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40004\/revisions"}],"predecessor-version":[{"id":40175,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40004\/revisions\/40175"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=40004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=40004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=40004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}