ALAS-2021-1553

Affected Products

Exploit Intelligence

• Simple tool for scanning entire directories for attempts of CVE-2021-44228 (github-poc)
• Log4Shell (CVE-2021-44228) 보안 실습 환경 - Log4j 2.14.1 취약 로그 수집 서버 (github-poc-repo)
• Log4Shell (CVE-2021-44228) 보안 실습 환경 - Log4j 2.14.1 취약 로그 수집 서버 (github-poc)
• webapp vulnerable to CVE-2021-44228 (github-poc-repo)
• webapp vulnerable to CVE-2021-44228 (github-poc)
• sqsec/log4j2_CVE-2021-44228 (github-poc)
• CVE-2021-44228 漏洞复现完整记录（含环境搭建、触发验证） (github-poc-repo)
• CVE-2021-44228 漏洞复现完整记录（含环境搭建、触发验证） (github-poc)
• horrister/log4shell-cve-2021-44228 (github-poc-repo)
• horrister/log4shell-cve-2021-44228 (github-poc)

…and 608 more exploits

Timeline

• Dec 10, 2021 PoC Published
• Dec 18, 2021 CVE Published

References

• ALAS-2021-1553: java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk (critical) advisory