org.apache.logging.log4j:log4j-core vulnerabilities

The Apache Log4j Implementation

Latest version

2.17.1

First published

9 years ago

Latest version published

a month ago

Licenses detected

Continuously find & fix vulnerabilities like these in your dependencies. Test and protect your applications

Direct Vulnerabilities

Known vulnerabilities in the org.apache.logging.log4j:log4j-core package. This does not include vulnerabilities belonging to this package’s dependencies.

Report new vulnerabilities
Vulnerability Vulnerable versions Snyk patch Published
  • M
Arbitrary Code Execution
[2.0-beta7,2.3.2),[2.4,2.12.4),[2.13.0,2.17.1) Not available 28 Dec, 2021
  • H
Denial of Service (DoS)
[2.0-beta9,2.3.1),[2.4,2.12.3),[2.13.0,2.17.0) Not available 18 Dec, 2021
  • C
Remote Code Execution (RCE)
[2.0-beta9,2.3.1),[2.4,2.12.2),[2.13.0,2.16.0) Not available 14 Dec, 2021
  • C
Remote Code Execution (RCE)
[2.0-beta9,2.3.1),[2.4,2.12.2),[2.13.0,2.15.0) Not available 10 Dec, 2021
  • L
Man-in-the-Middle (MitM)
[,2.13.2) Not available 28 Apr, 2020
  • C
Deserialization of Untrusted Data
[,2.8.2) Not available 21 May, 2017
Version Published Licenses Direct Vulnerabilities
org.apache.logging.log4j:log4j-core 2.3.2 29 Dec, 2021 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.12.4 28 Dec, 2021 Apache-2.0
  • 0 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.17.1
Latest
27 Dec, 2021 Apache-2.0
  • 0 C
  • 0 H
  • 0 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.3.1 21 Dec, 2021 Apache-2.0
  • 1 C
  • 0 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.12.3 20 Dec, 2021 Apache-2.0
  • 0 C
  • 0 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.17.0 18 Dec, 2021 Apache-2.0
  • 0 C
  • 0 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.12.2 14 Dec, 2021 Apache-2.0
  • 0 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.16.0 13 Dec, 2021 Apache-2.0
  • 0 C
  • 1 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.15.0 09 Dec, 2021 Apache-2.0
  • 1 C
  • 1 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.14.1 07 Mar, 2021 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.14.0 06 Nov, 2020 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.13.3 10 May, 2020 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.13.2 21 Apr, 2020 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 0 L
org.apache.logging.log4j:log4j-core 2.13.1 26 Feb, 2020 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.13.0 12 Dec, 2019 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.12.1 07 Aug, 2019 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.12.0 26 Jun, 2019 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.11.2 06 Feb, 2019 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.11.1 23 Jul, 2018 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.11.0 11 Mar, 2018 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.10.0 19 Nov, 2017 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.9.1 18 Sep, 2017 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.9.0 26 Aug, 2017 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.8.2 02 Apr, 2017 Apache-2.0
  • 2 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.8.1 27 Feb, 2017 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.8 22 Jan, 2017 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.7 02 Oct, 2016 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.6.2 06 Jul, 2016 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.6.1 06 Jun, 2016 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.6 25 May, 2016 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.5 07 Dec, 2015 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.4.1 09 Oct, 2015 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.4 20 Sep, 2015 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.3 10 May, 2015 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.2 22 Feb, 2015 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.1 20 Oct, 2014 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0.2 17 Aug, 2014 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0.1 30 Jul, 2014 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0 12 Jul, 2014 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-rc2
Pre-release
21 Jun, 2014 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-rc1
Pre-release
09 Feb, 2014 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta9
Pre-release
14 Sep, 2013 Apache-2.0
  • 3 C
  • 1 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta8
Pre-release
10 Jul, 2013 Apache-2.0
  • 1 C
  • 0 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta7
Pre-release
04 Jun, 2013 Apache-2.0
  • 1 C
  • 0 H
  • 1 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta6
Pre-release
07 May, 2013 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta5
Pre-release
20 Apr, 2013 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta4
Pre-release
28 Jan, 2013 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta3
Pre-release
11 Nov, 2012 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta2
Pre-release
07 Oct, 2012 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-beta1
Pre-release
18 Sep, 2012 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-alpha2
Pre-release
24 Aug, 2012 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L
org.apache.logging.log4j:log4j-core 2.0-alpha1
Pre-release
29 Jul, 2012 Apache-2.0
  • 1 C
  • 0 H
  • 0 M
  • 1 L