CVE-2017-5645: apache software foundation apache log4j Deserialization of Untrusted Data

Modified

AliasesRHSA-2017:1417UBUNTU-CVE-2017-5645DEBIAN-CVE-2017-5645+1 more

Published 17-04-2017Last modified 08-10-2026

Vulnerability summary

CVE-2017-5645 is a critical (CVSS 9.8) Deserialization of Untrusted Data vulnerability in apache software foundation apache log4j. EPSS estimates a 89.36% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 89% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

89.36%

0%100%

Critical · -0.43 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10

RHSA-2017:1801 RHSA-2017:2423 RHSA-2017:2635 RHSA-2017:2636 RHSA-2017:2637 RHSA-2017:2638+4 more

Timeline

17-04-2017
PublishedVulnerability first disclosed.
08-10-2026
Last modifiedVulnerability information updated.

Description

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

CVSS metrics

6 scores · 5 sources · 3 versions

v3.19.8v3.08.1v2.07.5

EPSS trend

Probability

89.36%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

Decrease -0.43 pp

From 89.79% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-502Deserialization of Untrusted DataThe product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Oracle64 products

api_gateway11.1.2.4.0
application_testing_suite13.3.0.1
autovue_vuelink_integration21.0.0 | 21.0.1
banking_platform2.6.0 | 2.6.1 | 2.6.2
bi_publisher11.1.1.7.0 | 11.1.1.9.0 | 12.2.1.3.0 | 12.2.1.4.0

Show all 64

Redhat11 products

enterprise_linuxEOL6.0 | 6.7 | 7.0 | 7.3 | 7.4 | 7.5 | 7.6
enterprise_linux_desktop7.0
enterprise_linux_server7.0
enterprise_linux_server_aus7.4 | 7.6
enterprise_linux_server_eus7.4 | 7.5 | 7.6

Show all 11

Netapp6 products

Show all 6

Org.apache.logging.log4j2 products

log4j≥ 2.0, < 2.8.2
log4j-core≥ 2.0, < 2.8.2

Apache1 product

log4j≥ 2.0, < 2.8.2

Apache software foundation1 product

apache log4jAll versions between 2.0-alpha1 and 2.8.1

Debian1 product

apache-log4j2< 2.7-2

Ubuntu1 product

apache-log4j2All versions (No fix recorded)

8 vendors · 87 products

References

135 links

access.redhat.com/errata/RHSA-2017:2888Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2809Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
www.securityfocus.com/bid/97702VDB EntryX Refsource BIDThird Party AdvisoryWEB
www.securitytracker.com/id/1041294VDB EntryX Refsource SECTRACKThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2810Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:1801Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2889Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2635Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2638Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:1417Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisoryWEB

Show all 100 references

access.redhat.com/errata/RHSA-2017:2423Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2808Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
www.securitytracker.com/id/1040200VDB EntryX Refsource SECTRACKThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2636Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:3399Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2637Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:3244Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:3400Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2633Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:2811Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2017:1802Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2019:1545Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2019/12/19/2Mailing ListX Refsource MLISTThird Party AdvisoryWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.oracle.com/security-alerts/cpuapr2020.htmlX Refsource MISCThird Party AdvisoryWEB
www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlX Refsource CONFIRMPatchWEB
www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlX Refsource CONFIRMPatchWEB
www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlX Refsource CONFIRMPatchWEB
www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlX Refsource CONFIRMPatchThird Party AdvisoryWEB
www.oracle.com/security-alerts/cpujul2020.htmlX Refsource MISCThird Party AdvisoryWEB
www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlX Refsource CONFIRMPatchThird Party AdvisoryWEB
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlX Refsource MISCPatchThird Party AdvisoryWEB
www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlX Refsource MISCPatchThird Party AdvisoryWEB
www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlX Refsource MISCPatchThird Party AdvisoryWEB
www.oracle.com/security-alerts/cpujan2020.htmlX Refsource MISCThird Party AdvisoryWEB
security.netapp.com/advisory/ntap-20181107-0002/X Refsource CONFIRMThird Party Advisory
security.netapp.com/advisory/ntap-20180726-0002/X Refsource CONFIRMThird Party Advisory
issues.apache.org/jira/browse/LOG4J2-1863X Refsource CONFIRMIssue TrackingVendor AdvisoryREPORTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.oracle.com/security-alerts/cpuoct2020.htmlX Refsource MISCThird Party AdvisoryWEB
www.oracle.com/security-alerts/cpujan2021.htmlX Refsource MISCThird Party AdvisoryWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.oracle.com/security-alerts/cpuApr2021.htmlX Refsource MISCThird Party AdvisoryWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.oracle.com/security-alerts/cpuoct2021.htmlX Refsource MISCThird Party AdvisoryWEB
www.oracle.com/security-alerts/cpujan2022.htmlX Refsource MISCThird Party AdvisoryWEB
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1443635REPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1417.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-5645REPORT
www.cve.org/CVERecord?id=CVE-2017-5645AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-5645Advisory
ubuntu.com/security/CVE-2017-5645REPORT
www.openwall.com/lists/oss-security/2017/04/17/2REPORT
git-wip-us.apache.org/repos/asf?p=logging-log4j2.git;h=5dcc192REPORT
security-tracker.debian.org/tracker/CVE-2017-5645Advisory
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB

Showing 100 of 135.