log4j vulnerabilities (Mageia)

4 vulnerabilities.

• log4j Mageia Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration CVE-2021-44832 Public exploitFix available EPSS 97.9% 6.6 MediumDecember 28, 2021
• log4j Mageia Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• log4j Mageia Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack CVE-2021-45046 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalDecember 14, 2021
• log4j Mageia Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021