Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceDEBIAN-CVE-2022-23305

DEBIAN-CVE-2022-23305

UNKNOWN

(By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as ...)

Published Apr 2, 2026

Modified Yesterday

Fix available

Affected Packages

apache-log4j1.2

Debian 10

Fixed in:

1.2.17-8+deb10u2

apache-log4j1.2

Debian 11

Fixed in:

1.2.17-10+deb11u1

References

https://security-tracker.debian.org/tracker/CVE-2022-23305

Related

CVE-2022-23305 DLA-2905-1

Ecosystems

Debian 10 Debian 11

Timeline

PublishedApr 2, 2026

ModifiedApr 2, 2026

DEBIAN-CVE-2022-23305 | Mondoo Vulnerability Intelligence