CVE:CVE-2021-45105
CNNVD:CNNVD-202112-1493
Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。
Apache Log4j2 2.0-alpha1到2.16.0版本（不包括2.12.3）存在安全漏洞，该漏洞源于自引用查找的不受控递归。攻击者可利用该漏洞在解释精心编制的字符串时导致拒绝服务。此问题已在2.17.0 和 2.12.3中修复。
solution:Upgrade apache log4j to a higher version than 2.3.1,2.12.3,2.16.0,and avoid the version [2.0,2.3.1),[2.4,2.12.3),[2.13.0,2.16.0]; Upgrade netapp cloud_manager to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade sonicwall email_security to a higher version than 10.0.12,and avoid the version (,10.0.12]; Upgrade sonicwall network_security_manager to a higher version than 3.0,and avoid the version [2.0,3.0); Upgrade sonicwall web_application_firewall to a higher version than 3.1.0,and avoid the version [3.0.0,3.1.0); Upgrade sonicwall 6bk1602-0aa12-0tp0_firmware to a higher version than 2.7.0,and avoid the version (,2.7.0); Upgrade sonicwall 6bk1602-0aa22-0tp0_firmware to a higher version than 2.7.0,and avoid the version (,2.7.0); Upgrade sonicwall 6bk1602-0aa32-0tp0_firmware to a higher version than 2.7.0,and avoid the version (,2.7.0); Upgrade sonicwall 6bk1602-0aa42-0tp0_firmware to a higher version than 2.7.0,and avoid the version (,2.7.0); Upgrade sonicwall 6bk1602-0aa52-0tp0_firmware to a higher version than 2.7.0,and avoid the version (,2.7.0); Upgrade oracle agile_engineering_data_management to a higher version than 6.2.1.0,and avoid the version 6.2.1.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle agile_plm_mcad_connector to a higher version than 3.6,and avoid the version 3.6; Upgrade oracle autovue_for_agile_product_lifecycle_management to a higher version than 21.0.2,and avoid the version 21.0.2; Upgrade oracle banking_deposits_and_lines_of_credit_servicing to a higher version than 2.12.0,and avoid the version 2.12.0; Upgrade oracle banking_enterprise_default_management to a higher version than 2.7.1,2.12.0,and avoid the version 2.7.1,2.12.0; Upgrade oracle banking_loans_servicing to a higher version than 2.12.0,and avoid the version 2.12.0; Upgrade oracle banking_party_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_payments to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_platform to a higher version than 2.6.2,2.7.1,2.12.0,and avoid the version 2.6.2,2.7.1,2.12.0; Upgrade oracle banking_trade_finance to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle banking_treasury_management to a higher version than 14.5,and avoid the version 14.5; Upgrade oracle business_intelligence to a higher version than 5.5.0.0.0,and avoid the version 5.5.0.0.0; Upgrade oracle communications_asap to a higher version than 7.3,and avoid the version 7.3; Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.4,12.0.0.5,and avoid the version 12.0.0.4,12.0.0.5; Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 1.15.0,1.15.1,and avoid the version 1.15.0,1.15.1; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.8.0,and avoid the version 1.8.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle communications_cloud_native_core_security_edge_protection_proxy to a higher version than 1.7.0,and avoid the version 1.7.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle communications_convergence to a higher version than 3.0.2.2.0,3.0.3.0,and avoid the version 3.0.2.2.0,3.0.3.0; Upgrade oracle communications_convergent_charging_controller to a higher version than 12.0.4.0.0,6.0.1.0.0,and avoid the version [12.0.1.0.0,12.0.4.0.0],6.0.1.0.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.1.0,and avoid the version [8.3.0.0,8.5.1.0]; Upgrade oracle communications_eagle_element_management_system to a higher version than 46.6,and avoid the version 46.6; Upgrade oracle communications_eagle_ftp_table_base_retrieval to a higher version than 4.5,and avoid the version 4.5; Upgrade oracle communications_element_manager to a higher version than 9.0,and avoid the version (,9.0); Upgrade oracle communications_evolved_communications_application_server to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.3,6.4,and avoid the version 6.3,6.4; Upgrade oracle communications_ip_service_activator to a higher version than 7.4.0,and avoid the version 7.4.0; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.4.0.0,6.0.1.0.0,and avoid the version [12.0.1.0.0,12.0.4.0.0],6.0.1.0.0; Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version 7.3.6; Upgrade oracle communications_performance_intelligence_center to a higher version than 10.4.0.3,and avoid the version 10.4.0.3; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4,12.0.0.5,and avoid the version 12.0.0.4,12.0.0.5; Upgrade oracle communications_service_broker to a higher version than 6.2,and avoid the version 6.2; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_report_manager to a higher version than 9.0,and avoid the version (,9.0); Upgrade oracle communications_session_route_manager to a higher version than 9.0,and avoid the version (,9.0); Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.5,7.4.1,7.4.2,and avoid the version 7.3.5,7.4.1,7.4.2; Upgrade oracle communications_user_data_repository to a higher version than 12.4,and avoid the version 12.4; Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2.0.0,7.2.1,and avoid the version 7.2.0.0,7.2.1; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle e-business_suite to a higher version than 12.2,and avoid the version 12.2; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,13.5.0.0,and avoid the version 13.4.0.0,13.5.0.0; Upgrade oracle enterprise_manager_for_peoplesoft to a higher version than 13.4.1.1,13.5.1.1,and avoid the version 13.4.1.1,13.5.1.1; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.1,and avoid the version [8.0.7,8.1.1]; Upgrade oracle financial_services_model_management_and_governance to a higher version than 8.0.8.0.0,8.1.0.0.0,8.1.1.0.0,and avoid the version 8.0.8.0.0,8.1.0.0.0,8.1.1.0.0; Upgrade oracle flexcube_universal_banking to a higher version than 12.4,14.3.0,11.83.3,14.5,and avoid the version [12.1.0,12.4],[14.0.0,14.3.0],11.83.3,14.5; Upgrade oracle health_sciences_empirica_signal to a higher version than 9.1.0.6,9.2.0.0,and avoid the version 9.1.0.6,9.2.0.0; Upgrade oracle health_sciences_inform to a higher version than 6.2.1.1,6.3.2.1,7.0.0.0,and avoid the version 6.2.1.1,6.3.2.1,7.0.0.0; Upgrade oracle health_sciences_information_manager to a higher version than 3.0.4,and avoid the version [3.0.1,3.0.4]; Upgrade oracle healthcare_data_repository to a higher version than 8.1.1,and avoid the version 8.1.1; Upgrade oracle healthcare_foundation to a higher version than 7.3.0.4,and avoid the version [7.3.0.1,7.3.0.4]; Upgrade oracle healthcare_master_person_index to a higher version than 5.0.1,and avoid the version 5.0.1; Upgrade oracle healthcare_translational_research to a higher version than 4.1.0,4.1.1,and avoid the version 4.1.0,4.1.1; Upgrade oracle hospitality_suite8 to a higher version than 8.13.0,8.14.0,and avoid the version 8.13.0,8.14.0; Upgrade oracle hospitality_token_proxy_service to a higher version than 19.2,and avoid the version 19.2; Upgrade oracle hyperion_bi+ to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_data_relationship_management to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_planning to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_profitability_and_cost_management to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle hyperion_tax_provision to a higher version than 11.2.8.0,and avoid the version (,11.2.8.0); Upgrade oracle identity_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle identity_manager_connector to a higher version than 9.1.0,and avoid the version 9.1.0; Upgrade oracle instantis_enterprisetrack to a higher version than 17.1,17.2,17.3,and avoid the version 17.1,17.2,17.3; Upgrade oracle insurance_data_gateway to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade oracle insurance_insbridge_rating_and_underwriting to a higher version than 5.6.0.0,5.2.0,5.6.1.0,and avoid the version [5.4,5.6.0.0],5.2.0,5.6.1.0; Upgrade oracle jdeveloper to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle managed_file_transfer to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle management_cloud_engine to a higher version than 1.5.0,and avoid the version 1.5.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.29,and avoid the version (,8.0.29]; Upgrade oracle payment_interface to a higher version than 19.1,20.3,and avoid the version 19.1,20.3; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,8.59,and avoid the version 8.58,8.59; Upgrade oracle primavera_gateway to a higher version than 17.12.11,18.8.13,19.12.12,20.12.7,21.12.0,and avoid the version [17.12.0,17.12.11],[18.8.0,18.8.13],[19.12.0,19.12.12],[20.12.0,20.12.7],21.12.0; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 19.12.18.0,20.12.12.0,21.12.0.0,and avoid the version [19.12.0.0,19.12.18.0],[20.12.0.0,20.12.12.0],21.12.0.0; Upgrade oracle primavera_unifier to a higher version than 18.8,19.12,20.12,21.12,and avoid the version 18.8,19.12,20.12,21.12; Upgrade oracle retail_back_office to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_central_office to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_customer_insights to a higher version than 15.0.2,16.0.2,and avoid the version 15.0.2,16.0.2; Upgrade oracle retail_data_extractor_for_merchandising to a higher version than 15.0.2,16.0.2,and avoid the version 15.0.2,16.0.2; Upgrade oracle retail_eftlink to a higher version than 16.0.3,17.0.2,18.0.1,19.0.1,20.0.1,21.0.0,and avoid the version 16.0.3,17.0.2,18.0.1,19.0.1,20.0.1,21.0.0; Upgrade oracle retail_financial_integration to a higher version than 16.0.3,14.1.3.2,15.0.3.1,19.0.0,19.0.1,and avoid the version [16.0.1,16.0.3],14.1.3.2,15.0.3.1,19.0.0,19.0.1; Upgrade oracle retail_integration_bus to a higher version than 16.0.3,19.0.1.0,14.1.3,14.1.3.2,15.0.3.1,19.0.0,19.0.1,and avoid the version [16.0.1,16.0.3],[19.0.0,19.0.1.0],14.1.3,14.1.3.2,15.0.3.1,19.0.0,19.0.1; Upgrade oracle retail_invoice_matching to a higher version than 15.0.3,16.0.3,and avoid the version 15.0.3,16.0.3; Upgrade oracle retail_merchandising_system to a higher version than 16.0.3,19.0.1,and avoid the version 16.0.3,19.0.1; Upgrade oracle retail_order_broker to a higher version than 16.0,18.0,19.1,and avoid the version 16.0,18.0,19.1; Upgrade oracle retail_order_management_system to a higher version than 19.5,and avoid the version 19.5; Upgrade oracle retail_point-of-service to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_predictive_application_server to a higher version than 14.1.3.46,15.0.3.115,16.0.3.240,and avoid the version 14.1.3.46,15.0.3.115,16.0.3.240; Upgrade oracle retail_price_management to a higher version than 13.2,14.0.4,14.1.3.0,15.0.3.0,16.0.3.0,and avoid the version 13.2,14.0.4,14.1.3.0,15.0.3.0,16.0.3.0; Upgrade oracle retail_returns_management to a higher version than 14.1,and avoid the version 14.1; Upgrade oracle retail_service_backbone to a higher version than 16.0.3,14.1.3,14.1.3.2,15.0.3.1,19.0.0,19.0.1,19.0.1.0,and avoid the version [16.0.1,16.0.3],14.1.3,14.1.3.2,15.0.3.1,19.0.0,19.0.1,19.0.1.0; Upgrade oracle retail_store_inventory_management to a higher version than 14.0.4.13,14.1.3.5,14.1.3.14,15.0.3.3,15.0.3.8,16.0.3.7,and avoid the version 14.0.4.13,14.1.3.5,14.1.3.14,15.0.3.3,15.0.3.8,16.0.3.7; Upgrade oracle siebel_ui_framework to a higher version than 21.12,and avoid the version (,21.12]; Upgrade oracle sql_developer to a higher version than 21.4.2,and avoid the version (,21.4.2); Upgrade oracle taleo_platform to a higher version than 22.1,and avoid the version (,22.1); Upgrade oracle utilities_framework to a higher version than 4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,and avoid the version [4.3.0.1.0,4.3.0.6.0],4.4.0.0.0,4.4.0.2.0,4.4.0.3.0; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0