Alerts This Week
Warning Icon 1 1,375
Alerts This Week
Warning Icon 1 1,375

Ubuntu 16.04 ESM: 5192-2 Critical: Apache Log4j 2 Remote Code Execution

ubuntu
Calendar Grey December 17, 2021
Dist Ubuntu Esm H88
The recent flaw in Apache Log4j 2 enables unauthorized remote execution and system instability. It's crucial to apply the necessary security updates to your Ubuntu system.
Apache Log4j 2 could be made to crash or run programs as an administrator if it received a specially crafted input.

Summary

Apache Log4j 2 could be made to crash or run programs as an administrator

if it received a specially crafted input.

Software Description:

- apache-log4j2: Apache Log4j - Logging Framework for Java

Details:

USN-5192-1 fixed a vulnerability in Apache Log4j 2. This update provides

the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Chen Zhaojun discovered that Apache Log4j 2 allows remote attackers to run

programs via a special crafted input. An attacker could use this vulnerability

to cause a denial of service or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service code execution remote execution apache log4j ubuntux

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  liblog4j2-java                  2.4-2ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5192-2

https://ubuntu.com/security/notices/USN-5192-1

CVE-2021-44228

Severity
critical
Lowest
Low
Medium
High
Critical

December 17, 2021

Topics%20covered

Topics Covered

security advisory denial of service code execution remote execution apache log4j ubuntux

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here