← Back

Log4jhotpatch

log4jhotpatch

Vendor: Amazon • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0070
1Amazon
1Log4jhotpatch
Jun 17, 2026
Apr 19, 2022
N/A· v4
8.8 HIGH· v3
7.2 HIGH· v2
Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotp...Show more
Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.Show less
CVE-2021-3100
1Amazon
1Log4jhotpatch
Jun 17, 2026
Apr 19, 2022
N/A· v4
8.8 HIGH· v3
7.2 HIGH· v2
The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges.