{"id":"CVE-2021-45105","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-45105","generatedAt":"2026-11-05T00:48:30.552Z","title":"This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted.","description":"Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","published":"2021-12-18T12:15:07.000Z","lastModified":"2026-08-25T16:28:27.000Z","status":"Modified","sourceIdentifier":"security@apache.org","cvss":{"version":"3.1","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-20","CWE-674"],"affected":["apache/log4j","netapp/cloud manager","debian/debian linux","sonicwall/email security","sonicwall/network security manager","sonicwall/web application firewall","sonicwall/6bk1602-0aa12-0tp0 firmware","sonicwall/6bk1602-0aa22-0tp0 firmware","sonicwall/6bk1602-0aa32-0tp0 firmware","sonicwall/6bk1602-0aa42-0tp0 firmware","sonicwall/6bk1602-0aa52-0tp0 firmware","oracle/agile engineering data management","oracle/agile plm mcad connector","oracle/agile product lifecycle management","oracle/autovue for agile product lifecycle management","oracle/banking deposits and lines of credit servicing","oracle/banking enterprise default management","oracle/banking loans servicing","oracle/banking party management","oracle/banking payments","oracle/banking platform","oracle/banking trade finance","oracle/banking treasury management","oracle/business intelligence","oracle/communications asap","oracle/communications billing and revenue management","oracle/communications cloud native core console","oracle/communications cloud native core network function cloud native environment","oracle/communications cloud native core network repository function","oracle/communications cloud native core network slice selection function","oracle/communications cloud native core policy","oracle/communications cloud native core security edge protection proxy","oracle/communications cloud native core service communication proxy","oracle/communications cloud native core unified data repository","oracle/communications convergence","oracle/communications convergent charging controller","oracle/communications diameter signaling router","oracle/communications eagle element management system","oracle/communications eagle ftp table base retrieval","oracle/communications element manager","oracle/communications evolved communications application server","oracle/communications interactive session recorder","oracle/communications ip service activator","oracle/communications messaging server","oracle/communications network charging and control","oracle/communications network integrity","oracle/communications performance intelligence center","oracle/communications pricing design center","oracle/communications service broker","oracle/communications services gatekeeper","oracle/communications session report manager","oracle/communications session route manager","oracle/communications unified inventory management","oracle/communications user data repository","oracle/communications webrtc session controller","oracle/data integrator","oracle/e-business suite","oracle/enterprise manager base platform","oracle/enterprise manager for peoplesoft","oracle/enterprise manager ops center"],"epss":{"score":0.99999,"percentile":0.9999,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 100.0%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/12/19/1","tags":["Mailing List","Mitigation","Third Party Advisory"],"source":"security@apache.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://logging.apache.org/log4j/2.x/security.html","tags":["Release Notes","Vendor Advisory"],"source":"security@apache.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://security.netapp.com/advisory/ntap-20211218-0001/","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.debian.org/security/2021/dsa-5024","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.kb.cert.org/vuls/id/930724","tags":["Third Party Advisory","US Government Resource"],"source":"security@apache.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1541/","tags":["Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/12/19/1","tags":["Mailing List","Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://logging.apache.org/log4j/2.x/security.html","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20211218-0001/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-5024","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/930724","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1541/","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-45105","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}