{"id":"CVE-2021-44228","details":"Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","aliases":["GHSA-jfh8-c2jp-5v3q"],"modified":"2026-04-16T04:30:26.990433093Z","published":"2021-12-10T10:15:09.143Z","related":["SUSE-SU-2021:4096-1","SUSE-SU-2021:4097-1","openSUSE-SU-2021:1577-1","openSUSE-SU-2021:1586-1","openSUSE-SU-2021:1601-1","openSUSE-SU-2021:1613-1","openSUSE-SU-2021:3999-1","openSUSE-SU-2021:4094-1","openSUSE-SU-2021:4107-1","openSUSE-SU-2021:4109-1","openSUSE-SU-2024:11666-1","openSUSE-SU-2024:11683-1"],"references":[{"type":"WEB","url":"https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html"},{"type":"ADVISORY","url":"https://github.com/cisagov/log4j-affected-db"},{"type":"ADVISORY","url":"https://www.kb.cert.org/vuls/id/930724"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/alert-cve-2021-44228.html"},{"type":"ADVISORY","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/13/2"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/15/3"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html"},{"type":"ADVISORY","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html"},{"type":"ADVISORY","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/10/3"},{"type":"ADVISORY","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20211210-0007/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-5020"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2022/Jul/11"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2022/Mar/23"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/10/1"},{"type":"ADVISORY","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf"},{"type":"ADVISORY","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf"},{"type":"ADVISORY","url":"https://logging.apache.org/log4j/2.x/security.html"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/10/2"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/14/4"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/12/13/1"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/"},{"type":"ADVISORY","url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032"},{"type":"ADVISORY","url":"https://support.apple.com/kb/HT213189"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html"},{"type":"ADVISORY","url":"https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001"},{"type":"ADVISORY","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"type":"FIX","url":"https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/"},{"type":"EVIDENCE","url":"https://twitter.com/kurtseifried/status/1469345530182455296"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html"},{"type":"EVIDENCE","url":"https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html"},{"type":"EVIDENCE","url":"http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html"},{"type":"EVIDENCE","url":"http://seclists.org/fulldisclosure/2022/Dec/2"},{"type":"EVIDENCE","url":"https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/logging-log4j2","events":[{"introduced":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"fixed":"38513a7d57343881f7bf58f37e67d6a87e0a47c5"},{"introduced":"0"},{"fixed":"ad361d2e517e765f69db464d9407ac2dd80bc93e"},{"introduced":"9dcb1823a0a0192f2016daf7c1445ddfb3435fbf"},{"fixed":"c30a1398a6697fb832c650870c44284d0052103e"},{"introduced":"0"},{"last_affected":"8d9204a4b4c6016fa6b36513a46502689d6a45c1"},{"introduced":"0"},{"last_affected":"8d9204a4b4c6016fa6b36513a46502689d6a45c1"},{"introduced":"0"},{"last_affected":"8d9204a4b4c6016fa6b36513a46502689d6a45c1"},{"introduced":"0"},{"fixed":"4eb3cf16d99f0332878b1b57f2b22b0fd737602f"},{"introduced":"0"},{"fixed":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"fixed":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"fixed":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"fixed":"901c8714622056af05d757d9360b1d384604a4da"},{"introduced":"0"},{"fixed":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"8d9204a4b4c6016fa6b36513a46502689d6a45c1"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"},{"introduced":"0"},{"last_affected":"6b788facd3479dfe9052b3a5e13f6603dce8c16f"}],"database_specific":{"versions":[{"introduced":"2.0.1"},{"fixed":"2.3.1"},{"introduced":"2.4.0"},{"fixed":"2.12.2"},{"introduced":"2.13.0"},{"fixed":"2.15.0"},{"introduced":"0"},{"last_affected":"2.0-NA"},{"introduced":"0"},{"last_affected":"4.2"},{"introduced":"0"},{"last_affected":"4.2"},{"introduced":"0"},{"fixed":"2.0.2"},{"introduced":"0"},{"fixed":"2.0.1"},{"introduced":"0"},{"fixed":"2.0.1"},{"introduced":"0"},{"fixed":"2.0.1"},{"introduced":"0"},{"fixed":"2.5"},{"introduced":"0"},{"fixed":"2.0\\(1p\\)"},{"introduced":"0"},{"last_affected":"2.0"},{"introduced":"0"},{"last_affected":"2.0(1a)"},{"introduced":"0"},{"last_affected":"2.0(1b)"},{"introduced":"0"},{"last_affected":"2.0(1c)"},{"introduced":"0"},{"last_affected":"2.0(1d)"},{"introduced":"0"},{"last_affected":"2.0(1e)"},{"introduced":"0"},{"last_affected":"2.0(1f)"},{"introduced":"0"},{"last_affected":"2.0(1g)"},{"introduced":"0"},{"last_affected":"2.0(1h)"},{"introduced":"0"},{"last_affected":"2.0(1k)"},{"introduced":"0"},{"last_affected":"2.0(1l)"}]}}],"versions":["log4j-2.0","log4j-2.0.1","log4j-2.1","log4j-2.1-rc2","log4j-2.1-rc3","log4j-2.10-rc1","log4j-2.10.0","log4j-2.11.0","log4j-2.11.0-rc1","log4j-2.11.1","log4j-2.11.1-rc1","log4j-2.11.2","log4j-2.11.2-rc1","log4j-2.11.2-rc2","log4j-2.11.2-rc3","log4j-2.12.0","log4j-2.12.0-rc1","log4j-2.12.0-rc2","log4j-2.12.1","log4j-2.12.1-rc1","log4j-2.13.0-rc2","log4j-2.13.1","log4j-2.13.1-rc1","log4j-2.13.1-rc2","log4j-2.13.2","log4j-2.13.2-rc1","log4j-2.13.3","log4j-2.13.3-rc1","log4j-2.14.0-rc1","log4j-2.14.1-rc1","log4j-2.15.0-rc1","log4j-2.3","log4j-2.4","log4j-2.4.1","log4j-2.5","log4j-2.5-rc1","log4j-2.7","log4j-2.7-rc1","log4j-2.7-rc2","log4j-2.8","log4j-2.8-rc1","log4j-2.8.1","log4j-2.8.1-rc1","log4j-2.9-rc1","log4j-2.9.0","log4j-2.9.1-rc1","rel/2.0","rel/2.0.1","rel/2.1","rel/2.10.0","rel/2.11.0","rel/2.11.1","rel/2.11.2","rel/2.12.0","rel/2.12.1","rel/2.13.0","rel/2.13.1","rel/2.13.2","rel/2.13.3","rel/2.14.0","rel/2.14.1","rel/2.3","rel/2.4","rel/2.4.1","rel/2.5","rel/2.7","rel/2.8","rel/2.8.1","rel/2.9.0"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"2.7.0"}]},{"events":[{"introduced":"0"},{"fixed":"2.7.0"}]},{"events":[{"introduced":"0"},{"fixed":"2.7.0"}]},{"events":[{"introduced":"0"},{"fixed":"2.7.0"}]},{"events":[{"introduced":"0"},{"fixed":"2.7.0"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0-beta9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0-rc1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0-rc2"}]},{"events":[{"introduced":"0"},{"fixed":"2019.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2019.1-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2019.1-sp1912"}]},{"events":[{"introduced":"0"},{"fixed":"10.4.2"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"5.1"}]},{"events":[{"introduced":"0"},{"last_affected":"5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"5.1"}]},{"events":[{"introduced":"0"},{"fixed":"2021-12-13"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1"}]},{"events":[{"introduced":"0"},{"last_affected":"8.5"}]},{"events":[{"introduced":"0"},{"last_affected":"8.6"}]},{"events":[{"introduced":"0"},{"last_affected":"8.7"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0"}]},{"events":[{"introduced":"0"},{"fixed":"3.8.0.12"}]},{"events":[{"introduced":"0"},{"fixed":"8.6.2j-398"}]},{"events":[{"introduced":"0"},{"fixed":"2021-12-13"}]},{"events":[{"introduced":"0"},{"fixed":"2021-12-16"}]},{"events":[{"introduced":"0"},{"fixed":"2021-12-13"}]},{"events":[{"introduced":"3.2"},{"fixed":"3.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.3"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1"}]},{"events":[{"introduced":"4.2"},{"fixed":"4.4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.80"}]},{"events":[{"introduced":"0"},{"last_affected":"2.85"}]},{"events":[{"introduced":"0"},{"last_affected":"4.16.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6"}]},{"events":[{"introduced":"0"},{"fixed":"2020"}]},{"events":[{"introduced":"0"},{"last_affected":"2020"}]},{"events":[{"introduced":"0"},{"last_affected":"2020-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2020-sp2002"}]},{"events":[{"introduced":"0"},{"fixed":"4.70"}]},{"events":[{"introduced":"0"},{"last_affected":"4.70-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"4.70-sp7"}]},{"events":[{"introduced":"0"},{"last_affected":"4.70-sp8"}]},{"events":[{"introduced":"0"},{"fixed":"2.30"}]},{"events":[{"introduced":"0"},{"last_affected":"2.30"}]},{"events":[{"introduced":"0"},{"last_affected":"2.30-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2.30-sp2"}]},{"events":[{"introduced":"0"},{"fixed":"2019.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2019.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2019.1-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2019.1-sp1912"}]},{"events":[{"introduced":"0"},{"last_affected":"2020.1-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"2021.1-NA"}]},{"events":[{"introduced":"0"},{"fixed":"5.1"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0"}]},{"events":[{"introduced":"0"},{"last_affected":"10.0"}]},{"events":[{"introduced":"0"},{"last_affected":"11.0"}]},{"events":[{"introduced":"0"},{"last_affected":"34"}]},{"events":[{"introduced":"0"},{"last_affected":"35"}]},{"events":[{"introduced":"0"},{"fixed":"10.0.13"}]},{"events":[{"introduced":"0"},{"fixed":"3.5.4"}]},{"events":[{"introduced":"0"},{"fixed":"2.1.0"}]},{"events":[{"introduced":"0"},{"fixed":"2021.11_1.162"}]},{"events":[{"introduced":"0"},{"fixed":"3.0.000.115"}]},{"events":[{"introduced":"3.1.000.000"},{"fixed":"3.1.000.044"}]},{"events":[{"introduced":"3.2.000.000"},{"fixed":"3.2.000.009"}]},{"events":[{"introduced":"0"},{"fixed":"12.6\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"4.10.0.16"}]},{"events":[{"introduced":"0"},{"fixed":"5.5.2"}]},{"events":[{"introduced":"0"},{"fixed":"5.3.1"}]},{"events":[{"introduced":"0"},{"fixed":"5.5.2"}]},{"events":[{"introduced":"0"},{"fixed":"2.9.1.3"}]},{"events":[{"introduced":"2.10.0"},{"fixed":"2.10.0.1"}]},{"events":[{"introduced":"0"},{"fixed":"12.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"12.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"fixed":"4.0.1"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"fixed":"1.12.1"}]},{"events":[{"introduced":"0"},{"fixed":"4.0.3"}]},{"events":[{"introduced":"0"},{"fixed":"11.3\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.3(1)"}]},{"events":[{"introduced":"0"},{"fixed":"2.1.2.8"}]},{"events":[{"introduced":"2.2.2.0"},{"fixed":"2.2.2.8"}]},{"events":[{"introduced":"2.2.3.0"},{"fixed":"2.2.3.4"}]},{"events":[{"introduced":"0"},{"fixed":"11.5\\(4\\)"}]},{"events":[{"introduced":"0"},{"fixed":"12.0\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1.1"}]},{"events":[{"introduced":"0"},{"fixed":"12.6\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)"}]},{"events":[{"introduced":"0"},{"fixed":"2.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0-NA"}]},{"events":[{"introduced":"0"},{"fixed":"2.3.2.1"}]},{"events":[{"introduced":"0"},{"fixed":"1.0.9-361"}]},{"events":[{"introduced":"0"},{"fixed":"6.0.2"}]},{"events":[{"introduced":"0"},{"fixed":"5.3.5.1"}]},{"events":[{"introduced":"5.4"},{"fixed":"5.4.5.2"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.5.4.1"}]},{"events":[{"introduced":"5.6"},{"fixed":"5.6.3.1"}]},{"events":[{"introduced":"0"},{"fixed":"2.1.2"}]},{"events":[{"introduced":"0"},{"fixed":"6.0.2"}]},{"events":[{"introduced":"0"},{"fixed":"1.1.0"}]},{"events":[{"introduced":"0"},{"fixed":"11.6"}]},{"events":[{"introduced":"0"},{"last_affected":"11.6(1)"}]},{"events":[{"introduced":"0"},{"fixed":"14.4.1"}]},{"events":[{"introduced":"0"},{"fixed":"12.1"}]},{"events":[{"introduced":"0"},{"fixed":"20.3.4.1"}]},{"events":[{"introduced":"20.4"},{"fixed":"20.4.2.1"}]},{"events":[{"introduced":"20.5"},{"fixed":"20.5.1.1"}]},{"events":[{"introduced":"20.6"},{"fixed":"20.6.2.1"}]},{"events":[{"introduced":"0"},{"fixed":"3.2.1"}]},{"events":[{"introduced":"0"},{"fixed":"6.8.2.0"}]},{"events":[{"introduced":"0"},{"fixed":"11.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"11.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)su3"}]},{"events":[{"introduced":"0"},{"fixed":"11.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)"}]},{"events":[{"introduced":"0"},{"fixed":"11.6\\(2\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.6(2)"}]},{"events":[{"introduced":"0"},{"fixed":"12.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"11.6"}]},{"events":[{"introduced":"0"},{"last_affected":"11.6"}]},{"events":[{"introduced":"0"},{"last_affected":"12.0"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5"}]},{"events":[{"introduced":"0"},{"fixed":"12.6\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"11.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"7.14.4"}]},{"events":[{"introduced":"0"},{"fixed":"2.6.7"}]},{"events":[{"introduced":"0"},{"fixed":"3.2.0"}]},{"events":[{"introduced":"3.4.0"},{"fixed":"3.4.4"}]},{"events":[{"introduced":"0"},{"fixed":"12.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"fixed":"7.3.0.2"}]},{"events":[{"introduced":"0"},{"fixed":"3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release1"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release2"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release3"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release3"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release3_security_patch4"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release3_security_patch5"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release3_service_pack_2"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release3_service_pack_3"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0-maintenance_release4"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0-maintenance_release1"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0-maintenance_release2"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0-maintenance_release3"}]},{"events":[{"introduced":"0"},{"fixed":"3.2.1"}]},{"events":[{"introduced":"0"},{"fixed":"10.2.1v2"}]},{"events":[{"introduced":"0"},{"fixed":"11.5\\(1\\)"}]},{"events":[{"introduced":"0"},{"last_affected":"6.2.3"}]},{"events":[{"introduced":"0"},{"last_affected":"6.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.6.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.7.0"}]},{"events":[{"introduced":"0"},{"last_affected":"7.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"7.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"02.01.00"}]},{"events":[{"introduced":"0"},{"last_affected":"4.10.0.15"}]},{"events":[{"introduced":"0"},{"last_affected":"5.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"5.4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"5.5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"5.5.1"}]},{"events":[{"introduced":"0"},{"last_affected":"002.009(000.000)"}]},{"events":[{"introduced":"0"},{"last_affected":"002.009(000.001)"}]},{"events":[{"introduced":"0"},{"last_affected":"002.009(000.002)"}]},{"events":[{"introduced":"0"},{"last_affected":"002.009(001.000)"}]},{"events":[{"introduced":"0"},{"last_affected":"002.009(001.001)"}]},{"events":[{"introduced":"0"},{"last_affected":"002.009(001.002)"}]},{"events":[{"introduced":"0"},{"last_affected":"002.010(000.000)"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"001.012"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0.2"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.2.2.8"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(4.65000.14)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(4.66000.14)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.0(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"5.1"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)-su1"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)-su2"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-es01"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-es02"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-es03"}]},{"events":[{"introduced":"0"},{"last_affected":"6.2.3"}]},{"events":[{"introduced":"0"},{"last_affected":"6.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.6.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.7.0"}]},{"events":[{"introduced":"0"},{"last_affected":"7.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"7.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"002.004(000.914)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"002.006(000.156)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"002.007(000.356)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"003.000(000.458)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"003.001(000.518)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"003.002(000.116)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"002.003(002.000)"}]},{"events":[{"introduced":"0"},{"last_affected":"2.3.2.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.9-343"}]},{"events":[{"introduced":"0"},{"last_affected":"6.0(2.1912)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.0(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.1(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.2(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.3(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.4(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(2)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(3)"}]},{"events":[{"introduced":"0"},{"last_affected":"6.0(2.1914)"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"8.3(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"8.4(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"8.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0(2)"}]},{"events":[{"introduced":"0"},{"last_affected":"9.1(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(2)"}]},{"events":[{"introduced":"0"},{"last_affected":"14.0(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.1"}]},{"events":[{"introduced":"0"},{"last_affected":"20.3"}]},{"events":[{"introduced":"0"},{"last_affected":"20.4"}]},{"events":[{"introduced":"0"},{"last_affected":"20.5"}]},{"events":[{"introduced":"0"},{"last_affected":"20.6"}]},{"events":[{"introduced":"0"},{"last_affected":"20.6.1"}]},{"events":[{"introduced":"0"},{"last_affected":"20.7"}]},{"events":[{"introduced":"0"},{"last_affected":"20.8"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1.3"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1.4"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1.5"}]},{"events":[{"introduced":"0"},{"last_affected":"3.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"21.3"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.17900.52)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.18119.2)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.18900.97)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.21900.40)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.22900.28)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.22900.6)"}]},{"events":[{"introduced":"0"},{"last_affected":"006.008(001.000)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.6(2)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.0(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(2)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)-su1"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(2)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.6(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.0(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.5(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-es01"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(1)-es02"}]},{"events":[{"introduced":"0"},{"last_affected":"12.6(2)-NA"}]},{"events":[{"introduced":"0"},{"last_affected":"010.000(000)"}]},{"events":[{"introduced":"0"},{"last_affected":"010.000(001)"}]},{"events":[{"introduced":"0"},{"last_affected":"010.002(000)"}]},{"events":[{"introduced":"0"},{"last_affected":"010.002(001)"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1)-sr7"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5"}]},{"events":[{"introduced":"0"},{"last_affected":"11.5(1.10000.6)"}]},{"events":[{"introduced":"0"},{"last_affected":"7.14(1.26)"}]},{"events":[{"introduced":"0"},{"last_affected":"7.14(2.26)"}]},{"events":[{"introduced":"0"},{"last_affected":"7.14(3.025)"}]},{"events":[{"introduced":"0"},{"last_affected":"7.14(4.018)"}]},{"events":[{"introduced":"0"},{"last_affected":"2.6.6"}]},{"events":[{"introduced":"0"},{"last_affected":"7.1.3"}]},{"events":[{"introduced":"0"},{"last_affected":"7.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"7.2.2"}]},{"events":[{"introduced":"0"},{"last_affected":"7.2.3"}]},{"events":[{"introduced":"0"},{"last_affected":"7.3"}]},{"events":[{"introduced":"0"},{"last_affected":"7.4"}]},{"events":[{"introduced":"0"},{"last_affected":"7.5"}]},{"events":[{"introduced":"0"},{"last_affected":"7.6"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0"}]},{"events":[{"introduced":"0"},{"fixed":"8.10.0"}]},{"events":[{"introduced":"0"},{"fixed":"3.6"}]},{"events":[{"introduced":"6.1"},{"fixed":"6.2.4.2"}]},{"events":[{"introduced":"0"},{"fixed":"6.4.3.2"}]},{"events":[{"introduced":"0"},{"last_affected":"7.3.2"}]},{"events":[{"introduced":"0"},{"fixed":"13.3"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44228.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}]}