← Back to CVE List
CVE-2021-44228NVD
Vulnerability Summary
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
CVSS v3.1 Base Metrics — Score 10.0 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Siemens 6bk1602-0aa12-0tp0 Firmware < 2.7.0
- Siemens 6bk1602-0aa22-0tp0 Firmware < 2.7.0
- Siemens 6bk1602-0aa32-0tp0 Firmware < 2.7.0
- Siemens 6bk1602-0aa42-0tp0 Firmware < 2.7.0
- Siemens 6bk1602-0aa52-0tp0 Firmware < 2.7.0
- Apache Log4j >= 2.0.1 and < 2.3.1
- Apache Log4j >= 2.4.0 and < 2.12.2
- Apache Log4j >= 2.13.0 and < 2.15.0
- Apache Log4j
- Siemens Sppa-t3000 Ses3000 Firmware
- Siemens Capital < 2019.1
- Siemens Capital
- Siemens Comos < 10.4.2
- Siemens Desigo Cc Advanced Reports
- Siemens Desigo Cc Info Center
- Siemens E-car Operation Center < 2021-12-13
- Siemens Energy Engage
- Siemens Energyip
- Siemens Energyip Prepay < 3.8.0.12
- Siemens Gma-manager < 8.6.2j-398
- Siemens Head-end System Universal Device Integration System
- Siemens Industrial Edge Management
- Siemens Industrial Edge Management Hub < 2021-12-13
- Siemens Logo\! Soft Comfort
- Siemens Mendix
- Siemens Mindsphere < 2021-12-16
- Siemens Navigator < 2021-12-13
- Siemens Nx
- Siemens Opcenter Intelligence >= 3.2 and < 3.5
- Siemens Operation Scheduler <= 1.1.3
- Siemens Sentron Powermanager
- Siemens Siguard Dsa >= 4.2 and < 4.4.1
- Siemens Sipass Integrated
- Siemens Siveillance Command <= 4.16.2.1
- Siemens Siveillance Control Pro
- Siemens Siveillance Identity
- Siemens Siveillance Vantage
- Siemens Siveillance Viewpoint
- Siemens Solid Edge Cam Pro
- Siemens Solid Edge Harness Design < 2020
- Siemens Solid Edge Harness Design
- Siemens Spectrum Power 4 < 4.70
- Siemens Spectrum Power 4
- Siemens Spectrum Power 7 < 2.30
- Siemens Spectrum Power 7
- Siemens Teamcenter
- Siemens Vesys < 2019.1
- Siemens Vesys
- Siemens Xpedition Enterprise
- Siemens Xpedition Package Integrator
- Intel Computer Vision Annotation Tool
- Intel Datacenter Manager < 5.1
- Intel Genomics Kernel Library
- Intel Oneapi Sample Browser
- Intel Secure Device Onboard
- Intel System Studio
- Debian Debian Linux
- Fedoraproject Fedora
- Sonicwall Email Security < 10.0.13
- Netapp Active Iq Unified Manager
- Netapp Brocade San Navigator
- Netapp Cloud Insights
- Netapp Cloud Manager
- Netapp Cloud Secure Agent
- Netapp Oncommand Insight
- Netapp Ontap Tools
- Netapp Snapcenter
- Netapp Solidfire \& Hci Storage Node
- Netapp Solidfire Enterprise Sds
- Cisco Advanced Malware Protection Virtual Private Cloud Appliance < 3.5.4
- Cisco Automated Subsea Tuning < 2.1.0
- Cisco Broadworks < 2021.11_1.162
- Cisco Business Process Automation < 3.0.000.115
- Cisco Business Process Automation >= 3.1.000.000 and < 3.1.000.044
- Cisco Business Process Automation >= 3.2.000.000 and < 3.2.000.009
- Cisco Cloud Connect < 12.6\(1\)
- Cisco Cloudcenter < 4.10.0.16
- Cisco Cloudcenter Cost Optimizer < 5.5.2
- Cisco Cloudcenter Suite Admin < 5.3.1
- Cisco Cloudcenter Workload Manager < 5.5.2
- Cisco Common Services Platform Collector < 2.9.1.3
- Cisco Common Services Platform Collector >= 2.10.0 and < 2.10.0.1
- Cisco Connected Mobile Experiences
- Cisco Contact Center Domain Manager < 12.5\(1\)
- Cisco Contact Center Management Portal < 12.5\(1\)
- Cisco Crosswork Data Gateway < 2.0.2
- Cisco Crosswork Data Gateway
- Cisco Crosswork Network Controller < 2.0.1
- Cisco Crosswork Network Controller
- Cisco Crosswork Optimization Engine < 2.0.1
- Cisco Crosswork Optimization Engine
- Cisco Crosswork Platform Infrastructure < 4.0.1
- Cisco Crosswork Platform Infrastructure
- Cisco Crosswork Zero Touch Provisioning < 2.0.1
- Cisco Crosswork Zero Touch Provisioning
- Cisco Customer Experience Cloud Agent < 1.12.1
- Cisco Cyber Vision Sensor Management Extension < 4.0.3
- Cisco Data Center Network Manager < 11.3\(1\)
- Cisco Data Center Network Manager
- Cisco Dna Center < 2.1.2.8
- Cisco Dna Center >= 2.2.2.0 and < 2.2.2.8
- Cisco Dna Center >= 2.2.3.0 and < 2.2.3.4
- Cisco Dna Spaces\ < 2.5
- Cisco Emergency Responder < 11.5\(4\)
- Cisco Enterprise Chat And Email < 12.0\(1\)
- Cisco Evolved Programmable Network Manager <= 4.1.1
- Cisco Finesse < 12.6\(1\)
- Cisco Finesse
- Cisco Fog Director
- Cisco Identity Services Engine < 2.4.0
- Cisco Identity Services Engine
- Cisco Integrated Management Controller Supervisor < 2.3.2.1
- Cisco Intersight Virtual Appliance < 1.0.9-361
- Cisco Iot Operations Dashboard
- Cisco Network Assurance Engine < 6.0.2
- Cisco Network Services Orchestrator < 5.3.5.1
- Cisco Network Services Orchestrator >= 5.4 and < 5.4.5.2
- Cisco Network Services Orchestrator >= 5.5 and < 5.5.4.1
- Cisco Network Services Orchestrator >= 5.6 and < 5.6.3.1
- Cisco Nexus Dashboard < 2.1.2
- Cisco Nexus Insights < 6.0.2
- Cisco Optical Network Controller < 1.1.0
- Cisco Packaged Contact Center Enterprise < 11.6
- Cisco Packaged Contact Center Enterprise
- Cisco Paging Server < 14.4.1
- Cisco Prime Service Catalog < 12.1
- Cisco Sd-wan Vmanage < 20.3.4.1
- Cisco Sd-wan Vmanage >= 20.4 and < 20.4.2.1
- Cisco Sd-wan Vmanage >= 20.5 and < 20.5.1.1
- Cisco Sd-wan Vmanage >= 20.6 and < 20.6.2.1
- Cisco Smart Phy < 3.2.1
- Cisco Ucs Central < 2.0\(1p\)
- Cisco Ucs Director < 6.8.2.0
- Cisco Unified Communications Manager < 11.5\(1\)
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager Im And Presence Service < 11.5\(1\)
- Cisco Unified Communications Manager Im And Presence Service
- Cisco Unified Contact Center Enterprise < 11.6\(2\)
- Cisco Unified Contact Center Enterprise
- Cisco Unified Contact Center Express < 12.5\(1\)
- Cisco Unified Customer Voice Portal < 11.6
- Cisco Unified Customer Voice Portal
- Cisco Unified Intelligence Center < 12.6\(1\)
- Cisco Unity Connection < 11.5\(1\)
- Cisco Video Surveillance Operations Manager < 7.14.4
- Cisco Virtual Topology System < 2.6.7
- Cisco Virtualized Infrastructure Manager < 3.2.0
- Cisco Virtualized Infrastructure Manager >= 3.4.0 and < 3.4.4
- Cisco Virtualized Voice Browser < 12.5\(1\)
- Cisco Wan Automation Engine < 7.3.0.2
- Cisco Webex Meetings Server < 3.0
- Cisco Webex Meetings Server
- Cisco Workload Optimization Manager < 3.2.1
- Cisco Unified Sip Proxy < 10.2.1v2
- Cisco Unified Workforce Optimization < 11.5\(1\)
- Cisco Fxos
- Cisco Automated Subsea Tuning
- Cisco Broadworks
- Cisco Cloudcenter Suite
- Cisco Common Services Platform Collector
- Cisco Crosswork Network Automation
- Cisco Cx Cloud Agent
- Cisco Cyber Vision
- Cisco Cyber Vision Sensor Management Extension
- Cisco Dna Center
- Cisco Dna Spaces
- Cisco Dna Spaces Connector
- Cisco Emergency Responder
- Cisco Enterprise Chat And Email
- Cisco Evolved Programmable Network Manager
- Cisco Integrated Management Controller Supervisor
- Cisco Intersight Virtual Appliance
- Cisco Mobility Services Engine
- Cisco Network Assurance Engine
- Cisco Network Dashboard Fabric Controller
- Cisco Network Insights For Data Center
- Cisco Network Services Orchestrator
- Cisco Optical Network Controller
- Cisco Paging Server
- Cisco Prime Service Catalog
- Cisco Sd-wan Vmanage
- Cisco Secure Firewall Threat Defense
- Cisco Smart Phy
- Cisco Ucs Central Software
- Cisco Unified Communications Manager Im \& Presence Service
- Cisco Unified Computing System
- Cisco Unified Contact Center Express
- Cisco Unified Contact Center Management Portal
- Cisco Unified Intelligence Center
- Cisco Unified Sip Proxy
- Cisco Unified Workforce Optimization
- Cisco Unity Connection
- Cisco Video Surveillance Manager
- Cisco Virtual Topology System
- Cisco Wan Automation Engine
- Snowsoftware Snow Commander < 8.10.0
- Snowsoftware Vm Access Proxy < 3.6
- Bentley Synchro >= 6.1 and < 6.2.4.2
- Bentley Synchro 4d < 6.4.3.2
- Percussion Rhythmyx <= 7.3.2
- Apple Xcode < 13.3
- Siemens 6bk1602-0aa12-0tp0 Firmware 2.7.0
- Siemens 6bk1602-0aa22-0tp0 Firmware 2.7.0
- Siemens 6bk1602-0aa32-0tp0 Firmware 2.7.0
- Siemens 6bk1602-0aa42-0tp0 Firmware 2.7.0
- Siemens 6bk1602-0aa52-0tp0 Firmware 2.7.0
- Apache Log4j 2.3.1
- Apache Log4j 2.12.2
- Apache Log4j 2.15.0
- Siemens Capital 2019.1
- Siemens Comos 10.4.2
- Siemens E-car Operation Center 2021-12-13
- Siemens Energyip Prepay 3.8.0.12
- Siemens Gma-manager 8.6.2j-398
- Siemens Industrial Edge Management Hub 2021-12-13
- Siemens Mindsphere 2021-12-16
- Siemens Navigator 2021-12-13
- Siemens Opcenter Intelligence 3.5
- Siemens Siguard Dsa 4.4.1
- Siemens Solid Edge Harness Design 2020
- Siemens Spectrum Power 4 4.70
- Siemens Spectrum Power 7 2.30
- Siemens Vesys 2019.1
- Intel Datacenter Manager 5.1
- Sonicwall Email Security 10.0.13
- Cisco Advanced Malware Protection Virtual Private Cloud Appliance 3.5.4
- Cisco Automated Subsea Tuning 2.1.0
- Cisco Broadworks 2021.11_1.162
- Cisco Business Process Automation 3.0.000.115
- Cisco Business Process Automation 3.1.000.044
- Cisco Business Process Automation 3.2.000.009
- Cisco Cloud Connect 12.6\(1\)
- Cisco Cloudcenter 4.10.0.16
- Cisco Cloudcenter Cost Optimizer 5.5.2
- Cisco Cloudcenter Suite Admin 5.3.1
- Cisco Cloudcenter Workload Manager 5.5.2
- Cisco Common Services Platform Collector 2.9.1.3
- Cisco Common Services Platform Collector 2.10.0.1
- Cisco Contact Center Domain Manager 12.5\(1\)
- Cisco Contact Center Management Portal 12.5\(1\)
- Cisco Crosswork Data Gateway 2.0.2
- Cisco Crosswork Network Controller 2.0.1
- Cisco Crosswork Optimization Engine 2.0.1
- Cisco Crosswork Platform Infrastructure 4.0.1
- Cisco Crosswork Zero Touch Provisioning 2.0.1
- Cisco Customer Experience Cloud Agent 1.12.1
- Cisco Cyber Vision Sensor Management Extension 4.0.3
- Cisco Data Center Network Manager 11.3\(1\)
- Cisco Dna Center 2.1.2.8
- Cisco Dna Center 2.2.2.8
- Cisco Dna Center 2.2.3.4
- Cisco Dna Spaces\ 2.5
- Cisco Emergency Responder 11.5\(4\)
- Cisco Enterprise Chat And Email 12.0\(1\)
- Cisco Finesse 12.6\(1\)
- Cisco Identity Services Engine 2.4.0
- Cisco Integrated Management Controller Supervisor 2.3.2.1
- Cisco Intersight Virtual Appliance 1.0.9-361
- Cisco Network Assurance Engine 6.0.2
- Cisco Network Services Orchestrator 5.3.5.1
- Cisco Network Services Orchestrator 5.4.5.2
- Cisco Network Services Orchestrator 5.5.4.1
- Cisco Network Services Orchestrator 5.6.3.1
- Cisco Nexus Dashboard 2.1.2
- Cisco Nexus Insights 6.0.2
- Cisco Optical Network Controller 1.1.0
- Cisco Packaged Contact Center Enterprise 11.6
- Cisco Paging Server 14.4.1
- Cisco Prime Service Catalog 12.1
- Cisco Sd-wan Vmanage 20.3.4.1
- Cisco Sd-wan Vmanage 20.4.2.1
- Cisco Sd-wan Vmanage 20.5.1.1
- Cisco Sd-wan Vmanage 20.6.2.1
- Cisco Smart Phy 3.2.1
- Cisco Ucs Central 2.0\(1p\)
- Cisco Ucs Director 6.8.2.0
- Cisco Unified Communications Manager 11.5\(1\)
- Cisco Unified Communications Manager Im And Presence Service 11.5\(1\)
- Cisco Unified Contact Center Enterprise 11.6\(2\)
- Cisco Unified Contact Center Express 12.5\(1\)
- Cisco Unified Customer Voice Portal 11.6
- Cisco Unified Intelligence Center 12.6\(1\)
- Cisco Unity Connection 11.5\(1\)
- Cisco Video Surveillance Operations Manager 7.14.4
- Cisco Virtual Topology System 2.6.7
- Cisco Virtualized Infrastructure Manager 3.2.0
- Cisco Virtualized Infrastructure Manager 3.4.4
- Cisco Virtualized Voice Browser 12.5\(1\)
- Cisco Wan Automation Engine 7.3.0.2
- Cisco Webex Meetings Server 3.0
- Cisco Workload Optimization Manager 3.2.1
- Cisco Unified Sip Proxy 10.2.1v2
- Cisco Unified Workforce Optimization 11.5\(1\)
- Snowsoftware Snow Commander 8.10.0
- Snowsoftware Vm Access Proxy 3.6
- Bentley Synchro 6.2.4.2
- Bentley Synchro 4d 6.4.3.2
- Apple Xcode 13.3
External References
- http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html
- http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html
- http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html
- http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html
- http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html
- http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html
- http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html
- http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html
- http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html
- http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2022/Dec/2
- http://seclists.org/fulldisclosure/2022/Jul/11
- http://seclists.org/fulldisclosure/2022/Mar/23
- http://www.openwall.com/lists/oss-security/2021/12/10/1
- http://www.openwall.com/lists/oss-security/2021/12/10/2
- http://www.openwall.com/lists/oss-security/2021/12/10/3
- http://www.openwall.com/lists/oss-security/2021/12/13/1
- http://www.openwall.com/lists/oss-security/2021/12/13/2
- http://www.openwall.com/lists/oss-security/2021/12/14/4
- http://www.openwall.com/lists/oss-security/2021/12/15/3
- https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf
- https://github.com/cisagov/log4j-affected-db
- https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228
- https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/
- https://logging.apache.org/log4j/2.x/security.html
- https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032
- https://security.netapp.com/advisory/ntap-20211210-0007/
- https://support.apple.com/kb/HT213189
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
- https://twitter.com/kurtseifried/status/1469345530182455296
- https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001
- https://www.debian.org/security/2021/dsa-5020
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html
- https://www.kb.cert.org/vuls/id/930724
- https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html
- https://www.oracle.com/security-alerts/alert-cve-2021-44228.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html
- http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html
- http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html
- http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html
- http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html
- http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html
- http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html
- http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html
- http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html
- http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2022/Dec/2
- http://seclists.org/fulldisclosure/2022/Jul/11
- http://seclists.org/fulldisclosure/2022/Mar/23
- http://www.openwall.com/lists/oss-security/2021/12/10/1
- http://www.openwall.com/lists/oss-security/2021/12/10/2
- http://www.openwall.com/lists/oss-security/2021/12/10/3
- http://www.openwall.com/lists/oss-security/2021/12/13/1
- http://www.openwall.com/lists/oss-security/2021/12/13/2
- http://www.openwall.com/lists/oss-security/2021/12/14/4
- http://www.openwall.com/lists/oss-security/2021/12/15/3
- https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf
- https://github.com/cisagov/log4j-affected-db
- https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228
- https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/
- https://logging.apache.org/log4j/2.x/security.html
- https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032
- https://security.netapp.com/advisory/ntap-20211210-0007/
- https://support.apple.com/kb/HT213189
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
- https://twitter.com/kurtseifried/status/1469345530182455296
- https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001
- https://www.debian.org/security/2021/dsa-5020
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html
- https://www.kb.cert.org/vuls/id/930724
- https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html
- https://www.oracle.com/security-alerts/alert-cve-2021-44228.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228