CVE-2023-26464 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-26464 Interim 1 7 2023-10-13T23:10:53Z current 2023-03-14T00:15:48Z 2023-10-13T23:10:53Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-26464 ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized. This issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 log4j log4j-javadoc log4j-jcl log4j-manual log4j-slf4j log4j12 log4j12-javadoc log4j12-manual log4j as a component of SUSE CaaS Platform 4.0 log4j-manual as a component of SUSE CaaS Platform 4.0 log4j12 as a component of SUSE Enterprise Storage 7 log4j as a component of SUSE Enterprise Storage 7.1 log4j-javadoc as a component of SUSE Enterprise Storage 7.1 log4j-jcl as a component of SUSE Enterprise Storage 7.1 log4j-slf4j as a component of SUSE Enterprise Storage 7.1 log4j12 as a component of SUSE Enterprise Storage 7.1 log4j12-javadoc as a component of SUSE Enterprise Storage 7.1 log4j12-manual as a component of SUSE Enterprise Storage 7.1 log4j as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 log4j as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS log4j-manual as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS log4j12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS log4j12-javadoc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS log4j12-manual as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS log4j as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j-javadoc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j-jcl as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j-slf4j as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j12-javadoc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j12-manual as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS log4j as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j-javadoc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j-jcl as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j-slf4j as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j12-javadoc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j12-manual as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS log4j as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 log4j-javadoc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 log4j-jcl as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 log4j-slf4j as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 log4j12 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 log4j12-javadoc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 log4j12-manual as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 log4j12 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 log4j as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j-javadoc as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j-jcl as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j-slf4j as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j12 as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j12-javadoc as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j12-manual as a component of SUSE Linux Enterprise Real Time 15 SP3 log4j as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata log4j as a component of SUSE Linux Enterprise Server 12 SP2-BCL log4j as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS log4j as a component of SUSE Linux Enterprise Server 12 SP4-LTSS log4j as a component of SUSE Linux Enterprise Server 12 SP5 log4j as a component of SUSE Linux Enterprise Server 15 SP1-LTSS log4j-manual as a component of SUSE Linux Enterprise Server 15 SP1-LTSS log4j12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS log4j12-javadoc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS log4j12-manual as a component of SUSE Linux Enterprise Server 15 SP2-LTSS log4j as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j-javadoc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j-jcl as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j-slf4j as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j12-javadoc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j12-manual as a component of SUSE Linux Enterprise Server 15 SP3-LTSS log4j as a component of SUSE Linux Enterprise Server Teradata 12 SP3 log4j as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS log4j as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 log4j as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 log4j as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 log4j-manual as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 log4j12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 log4j12-javadoc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 log4j12-manual as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 log4j as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j-javadoc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j-jcl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j-slf4j as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j12-javadoc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j12-manual as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 log4j as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 log4j-manual as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 log4j as a component of SUSE Manager Proxy 4.2 log4j-javadoc as a component of SUSE Manager Proxy 4.2 log4j-jcl as a component of SUSE Manager Proxy 4.2 log4j-slf4j as a component of SUSE Manager Proxy 4.2 log4j12 as a component of SUSE Manager Proxy 4.2 log4j as a component of SUSE Manager Retail Branch Server 4.2 log4j-javadoc as a component of SUSE Manager Retail Branch Server 4.2 log4j-jcl as a component of SUSE Manager Retail Branch Server 4.2 log4j-slf4j as a component of SUSE Manager Retail Branch Server 4.2 log4j12 as a component of SUSE Manager Retail Branch Server 4.2 log4j as a component of SUSE Manager Server 4.2 log4j-javadoc as a component of SUSE Manager Server 4.2 log4j-jcl as a component of SUSE Manager Server 4.2 log4j-slf4j as a component of SUSE Manager Server 4.2 log4j12 as a component of SUSE Manager Server 4.2 log4j as a component of SUSE OpenStack Cloud 9 log4j as a component of SUSE OpenStack Cloud Crowbar 9 ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized. This issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. CVE-2023-26464 SUSE CaaS Platform 4.0:log4j SUSE CaaS Platform 4.0:log4j-manual SUSE Enterprise Storage 7.1:log4j SUSE Enterprise Storage 7.1:log4j-javadoc SUSE Enterprise Storage 7.1:log4j-jcl SUSE Enterprise Storage 7.1:log4j-slf4j SUSE Enterprise Storage 7.1:log4j12 SUSE Enterprise Storage 7.1:log4j12-javadoc SUSE Enterprise Storage 7.1:log4j12-manual SUSE Enterprise Storage 7:log4j12 SUSE Linux Enterprise High Performance Computing 12 SP5:log4j SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:log4j SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:log4j-manual SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:log4j12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:log4j12-javadoc SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:log4j12-manual SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j-javadoc SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j-jcl SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j-slf4j SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j12 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j12-javadoc SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:log4j12-manual SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j-javadoc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j-jcl SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j-slf4j SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j12-javadoc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:log4j12-manual SUSE Linux Enterprise Module for Basesystem 15 SP4:log4j SUSE Linux Enterprise Module for Basesystem 15 SP4:log4j-javadoc SUSE Linux Enterprise Module for Basesystem 15 SP4:log4j-jcl SUSE Linux Enterprise Module for Basesystem 15 SP4:log4j-slf4j SUSE Linux Enterprise Module for Basesystem 15 SP4:log4j12 SUSE Linux Enterprise Module for Development Tools 15 SP4:log4j12 SUSE Linux Enterprise Module for Development Tools 15 SP4:log4j12-javadoc SUSE Linux Enterprise Module for Development Tools 15 SP4:log4j12-manual SUSE Linux Enterprise Real Time 15 SP3:log4j SUSE Linux Enterprise Real Time 15 SP3:log4j-javadoc SUSE Linux Enterprise Real Time 15 SP3:log4j-jcl SUSE Linux Enterprise Real Time 15 SP3:log4j-slf4j SUSE Linux Enterprise Real Time 15 SP3:log4j12 SUSE Linux Enterprise Real Time 15 SP3:log4j12-javadoc SUSE Linux Enterprise Real Time 15 SP3:log4j12-manual SUSE Linux Enterprise Server 11 SP3 for Teradata:log4j SUSE Linux Enterprise Server 12 SP2-BCL:log4j SUSE Linux Enterprise Server 12 SP4-ESPOS:log4j SUSE Linux Enterprise Server 12 SP4-LTSS:log4j SUSE Linux Enterprise Server 12 SP5:log4j SUSE Linux Enterprise Server 15 SP1-LTSS:log4j SUSE Linux Enterprise Server 15 SP1-LTSS:log4j-manual SUSE Linux Enterprise Server 15 SP2-LTSS:log4j12 SUSE Linux Enterprise Server 15 SP2-LTSS:log4j12-javadoc SUSE Linux Enterprise Server 15 SP2-LTSS:log4j12-manual SUSE Linux Enterprise Server 15 SP3-LTSS:log4j SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-javadoc SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-jcl SUSE Linux Enterprise Server 15 SP3-LTSS:log4j-slf4j SUSE Linux Enterprise Server 15 SP3-LTSS:log4j12 SUSE Linux Enterprise Server 15 SP3-LTSS:log4j12-javadoc SUSE Linux Enterprise Server 15 SP3-LTSS:log4j12-manual SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:log4j SUSE Linux Enterprise Server Teradata 12 SP3:log4j SUSE Linux Enterprise Server for SAP Applications 12 SP4:log4j SUSE Linux Enterprise Server for SAP Applications 12 SP5:log4j SUSE Linux Enterprise Server for SAP Applications 15 SP1:log4j SUSE Linux Enterprise Server for SAP Applications 15 SP1:log4j-manual SUSE Linux Enterprise Server for SAP Applications 15 SP2:log4j12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:log4j12-javadoc SUSE Linux Enterprise Server for SAP Applications 15 SP2:log4j12-manual SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j-javadoc SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j-jcl SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j-slf4j SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j12-javadoc SUSE Linux Enterprise Server for SAP Applications 15 SP3:log4j12-manual SUSE Linux Enterprise Software Development Kit 12 SP5:log4j SUSE Linux Enterprise Software Development Kit 12 SP5:log4j-manual SUSE Manager Proxy 4.2:log4j SUSE Manager Proxy 4.2:log4j-javadoc SUSE Manager Proxy 4.2:log4j-jcl SUSE Manager Proxy 4.2:log4j-slf4j SUSE Manager Proxy 4.2:log4j12 SUSE Manager Retail Branch Server 4.2:log4j SUSE Manager Retail Branch Server 4.2:log4j-javadoc SUSE Manager Retail Branch Server 4.2:log4j-jcl SUSE Manager Retail Branch Server 4.2:log4j-slf4j SUSE Manager Retail Branch Server 4.2:log4j12 SUSE Manager Server 4.2:log4j SUSE Manager Server 4.2:log4j-javadoc SUSE Manager Server 4.2:log4j-jcl SUSE Manager Server 4.2:log4j-slf4j SUSE Manager Server 4.2:log4j12 SUSE OpenStack Cloud 9:log4j SUSE OpenStack Cloud Crowbar 9:log4j important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H