{"id":"CVE-2017-5645","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5645","generatedAt":"2026-10-28T20:08:24.038Z","title":"In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","description":"In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","published":"2017-04-17T21:59:00.000Z","lastModified":"2026-10-08T22:16:41.000Z","status":"Modified","sourceIdentifier":"security@apache.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-502"],"affected":["apache/log4j","netapp/oncommand api services","netapp/oncommand insight","netapp/oncommand workflow automation","netapp/service level manager","netapp/snapcenter","netapp/storage automation store","redhat/fuse","redhat/enterprise linux","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server tus","redhat/enterprise linux workstation","oracle/api gateway","oracle/application testing suite","oracle/autovue vuelink integration","oracle/banking platform","oracle/bi publisher","oracle/communications converged application server - service controller","oracle/communications instant messaging server","oracle/communications interactive session recorder","oracle/communications messaging server","oracle/communications network integrity","oracle/communications online mediation controller","oracle/communications pricing design center","oracle/communications service broker","oracle/communications webrtc session controller","oracle/configuration manager","oracle/endeca information discovery studio","oracle/enterprise data quality","oracle/enterprise manager base platform","oracle/enterprise manager for fusion middleware","oracle/enterprise manager for mysql database","oracle/enterprise manager for oracle database","oracle/enterprise manager for peoplesoft","oracle/financial services analytical applications infrastructure","oracle/financial services behavior detection platform","oracle/financial services hedge management and ifrs valuations","oracle/financial services lending and leasing","oracle/financial services loan loss forecasting and provisioning","oracle/financial services profitability management","oracle/financial services regulatory reporting with agilereporter","oracle/flexcube investor servicing","oracle/fusion middleware mapviewer","oracle/goldengate","oracle/goldengate application adapters","oracle/identity analytics","oracle/identity management suite","oracle/identity manager connector","oracle/in-memory performance-driven planning","oracle/instantis enterprisetrack","oracle/insurance calculation engine","oracle/insurance policy administration","oracle/insurance rules palette","oracle/jd edwards enterpriseone tools","oracle/jdeveloper","oracle/mysql enterprise monitor","oracle/peoplesoft enterprise fin install"],"epss":{"score":0.89358,"percentile":0.99782,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 89.4%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/12/19/2","tags":["Mailing List","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["Patch"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["Patch"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["Patch"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.securityfocus.com/bid/97702","tags":["Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"http://www.securitytracker.com/id/1040200","tags":["Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"http://www.securitytracker.com/id/1041294","tags":["Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1417","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2423","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2633","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2635","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2636","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2637","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2638","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2808","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2809","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2810","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2811","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2888","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:2889","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3244","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3399","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3400","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:1545","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://issues.apache.org/jira/browse/LOG4J2-1863","tags":["Issue Tracking","Vendor Advisory"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/0dcca05274d20ef2d72584edcf8c917bbb13dbbd7eb35cae909d02e9%40%3Cdev.logging.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/277b4b5c2b0e06a825ccec565fa65bd671f35a4d58e3e2ec5d0618e1%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/44491fb9cc19acc901f7cff34acb7376619f15638439416e3e14761c%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/479471e6debd608c837b9815b76eab24676657d4444fcfd5ef96d6e6%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/6114ce566200d76e3cc45c521a62c2c5a4eac15738248f58a99f622c%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/84cc4266238e057b95eb95dfd8b29d46a2592e7672c12c92f68b2917%40%3Cannounce.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/8ab32b4c9f1826f20add7c40be08909de9f58a89dc1de9c09953f5ac%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/e8fb7d76a244ee997ba4b217d6171227f7c2521af8c7c5b16cba27bc%40%3Cdev.logging.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/eea03d504b36e8f870e8321d908e1def1addda16adda04327fe7c125%40%3Cdev.logging.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r0831e2e52a390758ce39a6193f82c11c295175adce6e6307de28c287%40%3Cissues.beam.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r18f1c010b554a3a2d761e8ffffd8674fd4747bcbcf16c643d708318c%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r23369fd603eb6d62d3b883a0a28d12052dcbd1d6d531137124cd7f83%40%3Cgithub.beam.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r2ce8d26154bea939536e6cf27ed02d3192bf5c5d04df885a80fe89b3%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r2ff63f210842a3c5e42f03a35d8f3a345134d073c80a04077341c211%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r3784834e80df2f284577a5596340fb84346c91a2dea6a073e65e3397%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r3a85514a518f3080ab1fc2652cfe122c2ccf67cfb32356acb1b08fe8%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r3d666e4e8905157f3c046d31398b04f2bfd4519e31f266de108c6919%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r4b25538be50126194cc646836c718b1a4d8f71bd9c912af5b59134ad%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r61590890edcc64140e0c606954b29a063c3d08a2b41d447256d51a78%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r681b4432d0605f327b68b9f8a42662993e699d04614de4851c35ffd1%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r746fbc3fc13aee292ae6851f7a5080f592fa3a67b983c6887cdb1fc5%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r7bcdc710857725c311b856c0b82cee6207178af5dcde1bd43d289826%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r94b5aae09c4bcff5d06cf641be17b00bd83ba7e10cad737bf16a1b8f%40%3Cgithub.beam.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r9d5c1b558a15d374bd5abd2d3ae3ca7e50e796a0efdcf91e9c5b4cdd%40%3Cgithub.beam.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/ra38785cfc0e7f17f8e24bebf775dd032c033fadcaea29e5bc9fffc60%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/ra9a682bc0a8dff1c5cefdef31c7c25f096d9121207cf2d74e2fc563d%40%3Ccommits.logging.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/raedd12dc24412b3780432bf202a2618a21a727788543e5337a458ead%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rb1b29aee737e1c37fe1d48528cb0febac4f5deed51f5412e6fdfe2bf%40%3Cissues.activemq.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rbfa7a0742be4981a3f9356a23d0e1a5f2e1eabde32a1a3d8e41420f8%40%3Cgithub.beam.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rc1eaed7f7d774d5d02f66e49baced31e04827a1293d61a70bd003ca7%40%3Cdev.tika.apache.org%3E","source":"security@apache.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5645","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}