VDB

RHSA-2022%3A0026

RHSA-2022%3A0026 PUBLISHED CVSS 5.900000095367432 MEDIUM

A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-logging-elasticsearch6@sha256:169e6882974d9cd36d72e1db75b57071aca7b8cf5aa2c13c8f7e3157505b80c3_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*, openshift4/ose-logging-elasticsearch6@sha256:169e6882974d9cd36d72e1db75b57071aca7b8cf5aa2c13c8f7e3157505b80c3_ppc64le, *
Red Hatopenshift4/ose-logging-kibana6@sha256:39b545a87dedd058beab6206b1cac9ed947dbe30a50f26a35aab25e5e59a6e53_s390x as a component of Red Hat OpenShift Container Platform 4.6*, *, openshift4/ose-logging-kibana6@sha256:39b545a87dedd058beab6206b1cac9ed947dbe30a50f26a35aab25e5e59a6e53_s390x
Red Hatopenshift4/ose-logging-fluentd@sha256:71abdeda606871f7b84a09debbddf204ee99f42e806b10f0cd17e5d74632757c_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*, openshift4/ose-logging-fluentd@sha256:71abdeda606871f7b84a09debbddf204ee99f42e806b10f0cd17e5d74632757c_ppc64le, *
Red Hatopenshift4/ose-egress-dns-proxy@sha256:d5810afd8c7d36f44c5130bd4bdcf2215dcc99582d020b1db4a8866606707121_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*, openshift4/ose-egress-dns-proxy@sha256:d5810afd8c7d36f44c5130bd4bdcf2215dcc99582d020b1db4a8866606707121_ppc64le, *
Red Hatopenshift4/ose-logging-curator5@sha256:1f9e1c24dae620af738fecb0b2fd36aecdb8f7f433f70c6b5089bb023fd7e9aa_amd64 as a component of Red Hat OpenShift Container Platform 4.6*, *, *
Red Hatopenshift4/ose-elasticsearch-operator@sha256:b1320c22359023ced54a7df87ae1cc7e81f6dd0879ca9b57db7cfb1492cb109b_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*, openshift4/ose-elasticsearch-operator@sha256:b1320c22359023ced54a7df87ae1cc7e81f6dd0879ca9b57db7cfb1492cb109b_ppc64le, *
Red Hatopenshift4/ose-logging-fluentd@sha256:81e179ed88533175874d7f5d34d32a568c6e6b1bd362727305b61f2451dbb060_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-logging-fluentd@sha256:81e179ed88533175874d7f5d34d32a568c6e6b1bd362727305b61f2451dbb060_s390x, *, *
Red Hatopenshift4/ose-egress-dns-proxy@sha256:8349a4a59394b19bf6a745289c327174523fde41e16f0760fc6ede3ff4782bc7_s390x as a component of Red Hat OpenShift Container Platform 4.6*, *, *
Red Hatopenshift4/ose-cluster-logging-operator@sha256:42f65580290ce0f8c840dc3473e11eaa868e1b53b6793e34681b8e5fff5926eb_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*, *, *
Red Hatopenshift4/ose-logging-elasticsearch6@sha256:f1a53e3be27c714226869b259c8eed80ac797b0cb83fbc2d786a9bba383d9547_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-logging-elasticsearch6@sha256:f1a53e3be27c714226869b259c8eed80ac797b0cb83fbc2d786a9bba383d9547_amd64, *, *
Red Hatopenshift4/ose-elasticsearch-operator@sha256:eba0695fa94be0d083f86bc962352699a44357ef02f22e0ef80caedf31150bbe_s390x as a component of Red Hat OpenShift Container Platform 4.6*, openshift4/ose-elasticsearch-operator@sha256:eba0695fa94be0d083f86bc962352699a44357ef02f22e0ef80caedf31150bbe_s390x, *
Red Hatopenshift4/ose-logging-curator5@sha256:d696874a0eeac134653d68d38bc36a57517b93c4be2e16eb9f3f6ad3d2a6bd16_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-logging-curator5@sha256:d696874a0eeac134653d68d38bc36a57517b93c4be2e16eb9f3f6ad3d2a6bd16_s390x, *, *
Red Hatopenshift4/ose-logging-kibana6@sha256:f2f672f0ef01723a1097ff08e84b21311441d119d77eee9e65937f47e876311b_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-logging-kibana6@sha256:f2f672f0ef01723a1097ff08e84b21311441d119d77eee9e65937f47e876311b_amd64, *, *
Red Hatopenshift4/ose-metering-presto@sha256:865fa3774bdc2c5c58fa6b3ea2cee245194945c6a4094a43e9e3c5be4579a12f_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-metering-presto@sha256:865fa3774bdc2c5c58fa6b3ea2cee245194945c6a4094a43e9e3c5be4579a12f_amd64, *, *
Red Hatopenshift4/ose-metering-hadoop@sha256:ca61ce16449acf4e38d0333c3fab0b533b9db6253b2944565c7f4eda2c6a4e96_amd64 as a component of Red Hat OpenShift Container Platform 4.6*, *, *
Red Hatopenshift4/ose-logging-elasticsearch6@sha256:29643626fe608c5ff0ea815a0afaed3fe7112f6c50963991014542cdb7ece835_s390x as a component of Red Hat OpenShift Container Platform 4.6*, *, *
Red Hatopenshift4/ose-logging-curator5@sha256:2e5d5ad2823b8a40bc7fee550f3078e2794b86daf90a73dc2ec2ea06e5488a26_ppc64le as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-logging-curator5@sha256:2e5d5ad2823b8a40bc7fee550f3078e2794b86daf90a73dc2ec2ea06e5488a26_ppc64le, *, *
Red Hatopenshift4/ose-logging-kibana6@sha256:79aa1de7f02407c2560597368614340d06cf2bd57f500860f75344d70e3b3a5d_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*, *, *
Red Hatopenshift4/ose-cluster-logging-operator@sha256:36fb516f19ab985c16b353898a7f50b898adeb1c78a7c2743a0658cb19a05484_s390x as a component of Red Hat OpenShift Container Platform 4.6*, *, openshift4/ose-cluster-logging-operator@sha256:36fb516f19ab985c16b353898a7f50b898adeb1c78a7c2743a0658cb19a05484_s390x
Red Hatopenshift4/ose-egress-dns-proxy@sha256:32ed19af20fdca8aea3ca49bb20e0e34a5b6798655fe78a8dd1db2b0f78d54cd_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-egress-dns-proxy@sha256:32ed19af20fdca8aea3ca49bb20e0e34a5b6798655fe78a8dd1db2b0f78d54cd_amd64, *, *

…and 4 more

Timeline

  • Jan 12, 2022 CVE Published
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 29, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›