Hi, I’m sure you’ve read the news by now, there’s a zeroday under active exploitation for log4j using JNDI to load remote execution through LDAP. CVE-2021-44228 https://www.lunasec.io/docs/blog/log4j-zero-day/ Could you please give an update how this relates to wowza and what steps need to be ta…

UPDATE: This is the OFFICIAL WOWZA UPDATED THREAD for both Streaming Engine and Streaming Engine Manager. Please read this Post only for newest information. Hello, There is an update for you regarding CVE-2021-44228 and CVE-2021-45046 . Both CVEs are related to the 3rd party software Apache log4…

UPDATE: FIX RELEASED FOR BOTH CVE-2021-44228 or CVE-2021-45046/ log4j2

Wowza Streaming Engine

Tyler_Featherston December 10, 2021, 3:32pm 2

I have submitted a ticket on this as well. I haven’t been able to find a clear answer.

1 Like

Log4j Vulnerability

Topic		Replies	Views
New Apache Log4j 2 Security Vulnerability CVE-2021-44832 \| dec 28 2021 Wowza Streaming Engine	0	1295	December 29, 2021
LATEST UPDATES HERE: Apache Lib4j2 2.17 CVE-2021-44228 & CVE-2021-45046 Wowza Streaming Engine	2	3147	January 3, 2022
Spring4Shell Vulnerability Wowza Streaming Engine	3	2352	April 4, 2022
Log4j Vulnerability Wowza Streaming Engine	3	5215	January 4, 2022
4.8.17+1 Custom Log4J Logging Module Not Working? Wowza Streaming Engine wowza-streaming-server-java-api	4	2830	February 16, 2022

UPDATE: FIX RELEASED FOR BOTH CVE-2021-44228 or CVE-2021-45046/ log4j2

Related topics