Skip to content

Santhosh Ponnam

Technology Blog

  • Home
  • About
  • Technology
    • Java
    • ORM
  • Privacy Policy
  • Toggle search form
  • Windows Commands – kill port number Installations and Configurations
  • HikariCP Configurations – Database Connection Pooling Installations and Configurations
  • Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team Java
  • Log4J (RCE) Vulnerability Java
  • hashCode and equals methods in java Java
  • HikariCP Connection Pooling for Spring Boot for 1.x version Spring Boot
  • Fixing Log4j Vulnerability Java
  • Unique Random ‘N’ digit Number generator Java

Tag: log4j

Another Log4j Bug – DoS

Posted on December 20, 2021December 22, 2021 By Santhosh Ponnam No Comments on Another Log4j Bug – DoS

Denial of Service (DoS) which is another Log4J Bug reported over the last couple of days after the fix for JNDI is provided. Apache Issues Fix and the new Log4j vulnerability is similar to Log4Shell but this DoS flaw has to do with Context Map lookups. Apache released another patch version 2.17.0 to address the…

Read More “Another Log4j Bug – DoS” »

Java

Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team

Posted on December 14, 2021December 22, 2021 By Santhosh Ponnam No Comments on Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team

A new version of Log4j with 2.16.0 has been released to address the JNDI issue to further prevent the CVE-2021-44228 permanently. While release 2.15.0 removed the ability to resolve Lookups and log messages and addressed issues with how JNDI is accessed, the Log4j team feels that having JNDI enabled by default introduces an undue risk…

Read More “Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team” »

Java

Fixing Log4j Vulnerability

Posted on December 11, 2021December 13, 2021 By Santhosh Ponnam No Comments on Fixing Log4j Vulnerability

The easiest way to remediate this is to update to log4j version 2.15.0 or later, as this behavior is now disabled by default. In previous releases (>2.10) this behavior can be mitigated by setting the system property log4j2.formatMsgNoLookups to true by adding the following Java parameter: -Dlog4j2.formatMsgNoLookups=true Alternatively, you can mitigate this vulnerability by removing…

Read More “Fixing Log4j Vulnerability” »

Java, Spring Boot

Log4J (RCE) Vulnerability

Posted on December 11, 2021December 13, 2021 By Santhosh Ponnam No Comments on Log4J (RCE) Vulnerability

What is the Log4J Vulnerability (CVE-2021-44228 vulnerability) which is creating a panic over java based applications? Lets quickly start with what it is and the remediation’s to fix it on various versions. CVE-2021-44228 is a vulnerability classified under the highest severity mark, i.e. 10 out of 10. It allows an attacker to execute arbitrary code…

Read More “Log4J (RCE) Vulnerability” »

Java

Recent Posts

  • Another Log4j Bug – DoS
  • Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team
  • Fixing Log4j Vulnerability
  • Log4J (RCE) Vulnerability
  • JPA vs Hibernate – Specification Vs Implementation

Categories

  • Installations and Configurations
  • Java
  • ORM
  • Spring Boot
  • Spring Boot HikariCP Connection Pooling

Archives

  • December 2021
  • August 2021
  • November 2020
  • March 2020
  • August 2018
  • November 2016
  • August 2016

Recent Posts

  • Another Log4j Bug – DoS
  • Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team
  • Fixing Log4j Vulnerability
  • Log4J (RCE) Vulnerability
  • JPA vs Hibernate – Specification Vs Implementation

Categories

  • Installations and Configurations
  • Java
  • ORM
  • Spring Boot
  • Spring Boot HikariCP Connection Pooling

Archives

  • December 2021
  • August 2021
  • November 2020
  • March 2020
  • August 2018
  • November 2016
  • August 2016




Recent Posts

  • Another Log4j Bug – DoS
  • Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team
  • Fixing Log4j Vulnerability
  • Log4J (RCE) Vulnerability
  • JPA vs Hibernate – Specification Vs Implementation

Categories

  • Installations and Configurations
  • Java
  • ORM
  • Spring Boot
  • Spring Boot HikariCP Connection Pooling
  • JPA vs Hibernate – Specification Vs Implementation ORM
  • HikariCP Configurations – Database Connection Pooling Installations and Configurations
  • Why to have a private constructor? Java
  • Log4J (RCE) Vulnerability Java
  • HikariCP Connection Pooling for Spring Boot for 1.x version Spring Boot
  • Log4j Vulnerability / Version Upgrade to 2.16.0 by Apache Team Java
  • hashCode and equals methods in java Java
  • Windows Commands – kill port number Installations and Configurations

Copyright © 2023 Santhosh Ponnam.

Powered by PressBook News WordPress theme