{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos6els/vex/2021/cve-2021-44228-els_os-centos6els.json" } ], "title": "Security update on CVE-2021-44228", "tracking": { "current_release_date": "2025-12-23T20:26:03Z", "generator": { "date": "2025-12-23T20:26:03Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2021-44228-ELS_OS-CENTOS6ELS", "initial_release_date": "2021-12-10T10:15:00Z", "revision_history": [ { "date": "2021-12-10T10:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2025-10-16T14:30:07Z", "number": "2", "summary": "Official Publication" }, { "date": "2025-11-29T11:34:38Z", "number": "3", "summary": "Update document" }, { "date": "2025-12-23T20:26:03Z", "number": "4", "summary": "Update document" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 6", "product": { "name": "Community Enterprise Operating System 6", "product_id": "CentOS-6", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "product": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "product_id": "log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/log4j@1.2.14-6.4.el6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "product": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "product_id": "log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/log4j@1.2.14-6.4.el6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "product": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "product_id": "log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/log4j@1.2.14-6.4.el6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64", "product": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64", "product_id": "log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/log4j@1.2.14-6.4.el6.tuxcare.els4?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64" }, "product_reference": "log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64" }, "product_reference": "log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64" }, "product_reference": "log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64" }, "product_reference": "log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64", "relates_to_product_reference": "CentOS-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-44228", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" }, { "category": "other", "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.", "title": "Statement" } ], "product_status": { "known_not_affected": [ "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-44228" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html", "url": "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html", "url": "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html", "url": "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html", "url": "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html", "url": "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html", "url": "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html", "url": "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html", "url": "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html", "url": "http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html", "url": "http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Dec/2", "url": "http://seclists.org/fulldisclosure/2022/Dec/2" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Jul/11", "url": "http://seclists.org/fulldisclosure/2022/Jul/11" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Mar/23", "url": "http://seclists.org/fulldisclosure/2022/Mar/23" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/10/1", "url": "http://www.openwall.com/lists/oss-security/2021/12/10/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/10/2", "url": "http://www.openwall.com/lists/oss-security/2021/12/10/2" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/10/3", "url": "http://www.openwall.com/lists/oss-security/2021/12/10/3" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/13/1", "url": "http://www.openwall.com/lists/oss-security/2021/12/13/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/13/2", "url": "http://www.openwall.com/lists/oss-security/2021/12/13/2" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/14/4", "url": "http://www.openwall.com/lists/oss-security/2021/12/14/4" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/12/15/3", "url": "http://www.openwall.com/lists/oss-security/2021/12/15/3" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf" }, { "category": "external", "summary": "https://github.com/cisagov/log4j-affected-db", "url": "https://github.com/cisagov/log4j-affected-db" }, { "category": "external", "summary": "https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md", "url": "https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md" }, { "category": "external", "summary": "https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228", "url": "https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/" }, { "category": "external", "summary": "https://logging.apache.org/log4j/2.x/security.html", "url": "https://logging.apache.org/log4j/2.x/security.html" }, { "category": "external", "summary": "https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/", "url": "https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/" }, { "category": "external", "summary": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20211210-0007/", "url": "https://security.netapp.com/advisory/ntap-20211210-0007/" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213189", "url": "https://support.apple.com/kb/HT213189" }, { "category": "external", "summary": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd", "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd" }, { "category": "external", "summary": "https://twitter.com/kurtseifried/status/1469345530182455296", "url": "https://twitter.com/kurtseifried/status/1469345530182455296" }, { "category": "external", "summary": "https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001", "url": "https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001" }, { "category": "external", "summary": "https://www.debian.org/security/2021/dsa-5020", "url": "https://www.debian.org/security/2021/dsa-5020" }, { "category": "external", "summary": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html" }, { "category": "external", "summary": "https://www.kb.cert.org/vuls/id/930724", "url": "https://www.kb.cert.org/vuls/id/930724" }, { "category": "external", "summary": "https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html", "url": "https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html", "url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2022.html", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujan2022.html", "url": "https://www.oracle.com/security-alerts/cpujan2022.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228" } ], "release_date": "2021-12-10T10:15:00Z", "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" }, { "category": "impact", "details": "critical", "product_ids": [ "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els1.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els2.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els3.x86_64", "CentOS-6:log4j-0:1.2.14-6.4.el6.tuxcare.els4.x86_64" ] } ] } ] }