VDB
RHSA-2022%3A0042
RHSA-2022%3A0042
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:2144ec2733a579ba4f6ff21f5a733f5ad52068ec7dc54252bbcbf38bdf9bde06_amd64 as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:74bc681d8c448a4bdff547b3f8119028e904c64c710fb1b5bb4ee016b13c2fdc_s390x as a component of OpenShift Logging 5.1 | *, *, openshift-logging/elasticsearch6-rhel8@sha256:74bc681d8c448a4bdff547b3f8119028e904c64c710fb1b5bb4ee016b13c2fdc_s390x |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:49580fc09b09288cd708481e3d2a81e9fdcbd875d23e444a80a54d20165417d1_s390x as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:43e78035965f037c2d03060de332556fd996f91afef969dba80c90981e43ccd7_s390x as a component of OpenShift Logging 5.1 | *, *, openshift-logging/kibana6-rhel8@sha256:43e78035965f037c2d03060de332556fd996f91afef969dba80c90981e43ccd7_s390x |
| Red Hat | openshift-logging/cluster-logging-operator-bundle@sha256:5aed9db163e965f2786e00f5cc27e2ae738a5ea400fde65403def07b56f9b44e_amd64 as a component of OpenShift Logging 5.1 | *, *, openshift-logging/cluster-logging-operator-bundle@sha256:5aed9db163e965f2786e00f5cc27e2ae738a5ea400fde65403def07b56f9b44e_amd64 |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:26cc3b0f2cf973f88251875484958a87c0184a26693385c5801edc0aa87b46ec_amd64 as a component of OpenShift Logging 5.1 | openshift-logging/elasticsearch-operator-bundle@sha256:26cc3b0f2cf973f88251875484958a87c0184a26693385c5801edc0aa87b46ec_amd64, *, * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:3cfa1f6fbe2374fe7393003f2bb1f1971d962398f7f4924e05837c54d4cacf06_ppc64le as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:fef623d868f3c6f16d39f1853e236e52fbdf48f529b8fec4db21301d4fabecd5_amd64 as a component of OpenShift Logging 5.1 | *, openshift-logging/elasticsearch6-rhel8@sha256:fef623d868f3c6f16d39f1853e236e52fbdf48f529b8fec4db21301d4fabecd5_amd64, * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:c1bb2b5fa69b561e3f65c262059a4784e1ac3d08afc05c1eac109a0b198f65d1_s390x as a component of OpenShift Logging 5.1 | *, openshift-logging/elasticsearch-rhel8-operator@sha256:c1bb2b5fa69b561e3f65c262059a4784e1ac3d08afc05c1eac109a0b198f65d1_s390x, * |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:28f20684e4478a2a083039e5554ad364d764d3af9c07529b4c41b1feaed8183c_s390x as a component of OpenShift Logging 5.1 | openshift-logging/eventrouter-rhel8@sha256:28f20684e4478a2a083039e5554ad364d764d3af9c07529b4c41b1feaed8183c_s390x, *, * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:ad2c3d7447af955402d903f83790f88d5f6d29cc523b54933c68d80366e5346e_s390x as a component of OpenShift Logging 5.1 | openshift-logging/fluentd-rhel8@sha256:ad2c3d7447af955402d903f83790f88d5f6d29cc523b54933c68d80366e5346e_s390x, *, * |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:cd4cb336303f187cec94043368fd30de9b79932fd29c2909fc08a623e4cc4c51_ppc64le as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:a68b9ed7b19e8289de0efce89bf0253b79703b46e4a0b54b7953202fea6f6513_s390x as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:1aac827a9fb85bd9340c887790d9ef3577a77b8105a0f8fcd9897c603354450c_amd64 as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:cf140d111408ed3cf2b245a6953de7fc1e958a1bfe18c430883fd95a612e4e6f_ppc64le as a component of OpenShift Logging 5.1 | *, *, * |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:604e76ac4d6d562991adb4931b94cf499d9c06453c2f82376736ecae18495658_amd64 as a component of OpenShift Logging 5.1 | *, openshift-logging/eventrouter-rhel8@sha256:604e76ac4d6d562991adb4931b94cf499d9c06453c2f82376736ecae18495658_amd64, * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:ac41da9ee00bb755906009e21df87e586b7565a92f3b716fb99e72d744ef9ffe_ppc64le as a component of OpenShift Logging 5.1 | *, openshift-logging/cluster-logging-rhel8-operator@sha256:ac41da9ee00bb755906009e21df87e586b7565a92f3b716fb99e72d744ef9ffe_ppc64le, * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:0bda3c71be7183afc13247ae55ca2f5b11193a82c8440a883aa73e403b5f77f6_ppc64le as a component of OpenShift Logging 5.1 | *, *, openshift-logging/elasticsearch6-rhel8@sha256:0bda3c71be7183afc13247ae55ca2f5b11193a82c8440a883aa73e403b5f77f6_ppc64le |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:dbd6862307c3a4fc5c5ab67dbafb7be453ba3f1c7e914f2afc25bb817cb24b0e_amd64 as a component of OpenShift Logging 5.1 | openshift-logging/elasticsearch-proxy-rhel8@sha256:dbd6862307c3a4fc5c5ab67dbafb7be453ba3f1c7e914f2afc25bb817cb24b0e_amd64, *, * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:6628f6ce35760597d9ec97f6c5ffaca403728f0aac44f5d5d7d23f2c0a11911f_amd64 as a component of OpenShift Logging 5.1 | *, *, openshift-logging/cluster-logging-rhel8-operator@sha256:6628f6ce35760597d9ec97f6c5ffaca403728f0aac44f5d5d7d23f2c0a11911f_amd64 |
…and 3 more
Timeline
- Jan 10, 2022 CVE Published
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:0042 advisory
- https://access.redhat.com/security/updates/classification/#low advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2034067 issue
- https://issues.redhat.com/browse/LOG-1868 advisory
- https://issues.redhat.com/browse/LOG-2022 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0042.json advisory
- https://access.redhat.com/security/cve/CVE-2021-45105 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-45105 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-45105 advisory
- https://issues.apache.org/jira/browse/LOG4J2-3230 advisory
- https://logging.apache.org/log4j/2.x/security.html advisory
- https://www.openwall.com/lists/oss-security/2021/12/19/1 advisory