Bug 828837 (CVE-2021-4104)

Summary:	[Tracker] Log4j JNDI Remote Code Execution
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	leho
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	828657, 828853, 828936, 828969, 829034, 830716, 831509
Bug Blocks:

Description John Helmert III archtester

2021-12-10 16:16:31 UTC

Remote code execution exists in log4j where untrusted input is logged:

https://github.com/apache/logging-log4j2/pull/608
https://github.com/tangxiaofeng7/apache-log4j-poc

Fix is in 2.15.0.