Advisory Database
  • Advisories
  • Dependency Scanning
  1. maven
  2. ›
  3. org.apache.logging.log4j/log4j-api
  4. ›
  5. CVE-2021-45105

CVE-2021-45105: Uncontrolled Recursion

December 18, 2021 (updated February 8, 2022)

This advisory has been marked as a false positive.

References

  • www.openwall.com/lists/oss-security/2021/12/19/1
  • cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf
  • cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf
  • github.com/advisories/GHSA-p6xc-xr62-6r2g
  • lists.debian.org/debian-lts-announce/2021/12/msg00017.html
  • lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/
  • lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/
  • logging.apache.org/log4j/2.x/security.html
  • nvd.nist.gov/vuln/detail/CVE-2021-45105
  • psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032
  • security.netapp.com/advisory/ntap-20211218-0001/
  • tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
  • www.debian.org/security/2021/dsa-5024
  • www.kb.cert.org/vuls/id/930724
  • www.oracle.com/security-alerts/cpujan2022.html
  • www.zerodayinitiative.com/advisories/ZDI-21-1541/

Code Behaviors & Features

Detect and mitigate CVE-2021-45105 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 2.12.3, all versions after 2.12.3 before 2.17.0

Fixed versions

  • 2.12.3
  • 2.17.0

Solution

Upgrade to versions 2.12.3, 2.17.0 or above.

Impact 5.9 MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Learn more about CVSS

Weakness

  • CWE-20: Improper Input Validation
  • CWE-674: Uncontrolled Recursion

Source file

maven/org.apache.logging.log4j/log4j-api/CVE-2021-45105.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:16:13 +0000.