VDB

RHSA-2022%3A0043

RHSA-2022%3A0043 PUBLISHED CVSS 5.900000095367432 MEDIUM

A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64 as a component of OpenShift Logging 5.2openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64, *, *
Red Hatopenshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x as a component of OpenShift Logging 5.2openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x, *, *
Red Hatopenshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le as a component of OpenShift Logging 5.2*, *, openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le
Red Hatopenshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x as a component of OpenShift Logging 5.2openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x, *, *
Red Hatopenshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64 as a component of OpenShift Logging 5.2*, *, *
Red Hatopenshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64 as a component of OpenShift Logging 5.2*, *, *
Red Hatopenshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x as a component of OpenShift Logging 5.2*, *, openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x
Red Hatopenshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x as a component of OpenShift Logging 5.2*, *, openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x
Red Hatopenshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64 as a component of OpenShift Logging 5.2*, openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64, *
Red Hatopenshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64 as a component of OpenShift Logging 5.2openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64, *, *
Red Hatopenshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64 as a component of OpenShift Logging 5.2*, *, *
Red Hatopenshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le as a component of OpenShift Logging 5.2*, *, openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le
Red Hatopenshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64 as a component of OpenShift Logging 5.2*, *, *
Red Hatopenshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le as a component of OpenShift Logging 5.2*, *, openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le
Red Hatopenshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le as a component of OpenShift Logging 5.2*, openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le, *
Red Hatopenshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64 as a component of OpenShift Logging 5.2*, *, openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64
Red Hatopenshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64 as a component of OpenShift Logging 5.2*, *, *
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x as a component of OpenShift Logging 5.2openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x, *, *
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le as a component of OpenShift Logging 5.2*, *, openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le
Red Hatopenshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x as a component of OpenShift Logging 5.2*, *, openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x

…and 9 more

Timeline

  • Jan 10, 2022 CVE Published
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 29, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›