Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2017-5929GHSA-VMFG-RJJM-RJRJ

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.2.0
None on Exploit-DB, Metasploit or GitHub

Summary

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

  • ch.qos.logback:logback-classicMaven

    fixed in 1.2.0

  • ch.qos.logback:logback-coreMaven

    fixed in 1.2.0

References 21

access.redhat.com

logback.qos.ch

lists.apache.org