log4j vulnerabilities (openEuler)

6 vulnerabilities.

• log4j openEuler Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson() CVE-2026-49844 Public exploitFix available 6.3 MediumJuly 10, 2026
• log4j openEuler Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout CVE-2026-34481 Fix available 6.3 MediumApril 10, 2026
• log4j openEuler Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration CVE-2021-44832 Public exploitFix available EPSS 97.9% 6.6 MediumDecember 28, 2021
• log4j openEuler Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• log4j openEuler Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack CVE-2021-45046 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalDecember 14, 2021
• log4j openEuler Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021