{"schemaVersion":3,"id":"USN-7616-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"logback vulnerabilities\n\nIt was discovered that logback could read malicious configuration files\nfrom LDAP servers. An attacker with the required permissions could possibly\nuse this issue to execute arbitrary code. This issue only affected Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-42550)  It was\ndiscovered that logback contained a serialization vulnerability. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2023-6378)","dates":{"published":"2025-07-02T18:53:34.000Z","modified":"2026-06-25T13:32:30.601Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"logback","name":"logback","label":"logback","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/logback","purlType":"deb","versions":[{"text":"< 1:1.1.3-2ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.2.3-2ubuntu1~18.04.1+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.2.3-5ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.2.10-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.1.3-2ubuntu0.1~esm1 | < 1:1.2.3-2ubuntu1~18.04.1+esm1 | < 1:1.2.3-5ubuntu0.1~esm1 | < 1:1.2.10-1ubuntu0.1~esm1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7616-1","label":"ubuntu.com/security/notices/USN-7616-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-42550","label":"ubuntu.com/security/CVE-2021-42550","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2023-6378","label":"ubuntu.com/security/CVE-2023-6378","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2021-42550","CVE-2023-6378"],"downstream":[],"duplicates":[],"related":["CVE-2021-42550","CVE-2023-6378"]},"timeline":[{"kind":"published","date":"2025-07-02T18:53:34.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:30.601Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:39:25.047Z","stale":false,"partial":false}}