Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Submission + - RCE 0-day exploit "log4shell" found in log4j, a popular Java logging package (lunasec.io)

alfabravoteam writes: A 0-day was found on log4j v2, a very popular logging library on Java environments.

Given how ubiquitous this library is, the impact of the exploit (full server control), and how easy it is to exploit, the impact of this vulnerability is quite severe. We're calling it "Log4Shell" for short (CVE-2021-44228 just isn't as memorable).
The 0-day was tweeted along with a POC posted on GitHub. (...) This has been published as CVE-2021-44228 now.
Many, many services are vulnerable to this exploit. Cloud services like Steam, Apple iCloud, and apps like Minecraft have already been found to be vulnerable.
Anybody using Apache Struts is likely vulnerable. We've seen similar vulnerabilities exploited before in breaches like the 2017 Equifax data breach.
Many Open Source projects like the Minecraft server, Paper, have already begun patching their usage of log4j.


Comment Absolutely Loved Lynch's Dune (Score 1) 201

I truly believe it's a masterpiece. Impacted me more as a kid than any of the star wars movies. Ominous, different, and culturally "alien", which is what I want to see in a scifi movie. Also the writing was great - I was surprised that some of my favorite quotes weren't even in the book. Such as the whole juice of sapho chant - "It is by will alone I set my mind in motion. It is by the juice of Sapho that thoughts acquire speed, the lips acquire stains, stains become a warning. It is by will alone I set my mind in motion.". That's my relationship with Coffee ;)

Comment Well done VLC (Score 2) 53

I'm not sure why all the hate - I see VLC as one of the pivotal open source success stories. I don't care that it may take a few more seconds to start up - When I have moms and pops calling me to ask "what do I need to watch this video file?" , Mac/Win/Nix . . . doesn't matter... VLC is always the answer. "It Just Works (tm)"

Slashdot Top Deals

After an instrument has been assembled, extra components will be found on the bench.

Working...