Back

CRITICAL

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

Published Mar 13, 2017

Description

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Affected products

Remediation

Red Hat statement

The vulnerability applies to logback-classic and logback-core.There is no documented evidence in the official upstream advisory that logback-json-core is affected.

Metrics

References (44)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 13, 2017
Updated Aug 5, 2024
Reserved Feb 7, 2017
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Feb 8, 2017
GHSA-VMFG-RJJM-RJRJ