{"blog_url":"https://vul.hatenadiary.com/","image_url":null,"provider_url":"https://hatena.blog","title":"Apache Log4j\u306e\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2021-44228\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77","provider_name":"Hatena Blog","author_url":"https://blog.hatena.ne.jp/tanigawa/","version":"1.0","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fvul.hatenadiary.com%2Fentry%2F2021%2F12%2F15%2F000000_3\" title=\"Apache Log4j\u306e\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2021-44228\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 - TT \u8106\u5f31\u6027 Blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","author_name":"tanigawa","height":"190","type":"rich","width":"100%","url":"https://vul.hatenadiary.com/entry/2021/12/15/000000_3","blog_title":"TT \u8106\u5f31\u6027 Blog","published":"2021-12-15 00:00:00","categories":["\u30e9\u30a4\u30d6\u30e9\u30ea: Apache Log4j","\u8106\u5f31\u6027: Log4Shell","CVE-2021-44228","CVE-2021-45046"],"description":"\u3010\u6982\u8981\u3011 \u9805\u76ee \u5185\u5bb9 CVE\u756a\u53f7 CVE-2021-44228 \u8106\u5f31\u6027\u306e\u7a2e\u5225 \u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd PoC \u5b58\u5728 \u653b\u6483 \u767a\u751f \u25a0\u56de\u907f\u7b56 \u30d0\u30fc\u30b8\u30e7\u30f3 \u56de\u907f\u7b56 2.10\u3088\u308a\u524d Java\u4eee\u60f3\u30de\u30b7\u30f3\u3092\u8d77\u52d5\u6642\u306b\u300clog4j2.formatMsgNoLookups\u300d\u3068\u3044\u3046JVM\u30d5\u30e9\u30b0\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u300ctrue\u300d\u306b\u6307\u5b9a\u74b0\u5883\u5909\u6570\u300cLOG4J_FORMAT_MSG_NO_LOOKUPS\u300d\u3092\u300ctrue\u300d\u306b\u8a2d\u5b9aJndiLookup.class\u3092\u30af\u30e9\u30b9\u30d1\u30b9\u304b\u3089\u524a\u9664 2.10\u53ca\u3073\u305d\u308c\u4ee5\u964d JndiLookup\u30af\u30e9\u30b9\u3092\u30af\u30e9\u30b9\u30d1\u30b9\u304b\u3089\u524a\u9664 \u25a0\u30d0\u30fc\u30b8\u30e7\u30f31 \u306e\u8106\u5f31\u6027 \u9060\u9694\u304b\u3089\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u653b\u6483\u306e\u5f71\u97ff\u306f\u53d7\u3051\u307e\u305b\u3093 \u653b\u6483\u3092\u884c\u3046\u2026"}