Rewterz Threat Advisory – CVE-2023-26464 – Apache Log4j Vulnerability

Severity

High

Analysis Summary

CVE-2023-26464

Apache Log4j is vulnerable to a denial of service, caused by a flaw when using the Chainsaw or SocketAppender components. By sending a specially crafted hashmap or hashtable, a remote attacker could exploit this vulnerability to exhaust available memory in the virtual machine, and results in a denial of service condition.

Impact

• Denial of Service

Indicators Of Compromise

CVE

• CVE-2023-26464

Affected Vendors

Apache

Affected Products

• Apache Log4j 1.2

Remediation

Upgrade to the latest version of Apache Log4j, available from the Apache Web site.

Apache Web site