UBUNTU-CVE-2017-5929: Critical severity ubuntu/logback vulnerability
Published Mar 13, 2017
·Updated
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
Affected Software
1 affected component
ubuntu/logback*
Event History
Mar 13, 2017
CVE Published
via OSV·06:59 AM
Data Sourced
via OSV·06:59 AM
DescriptionSeverityAffected Software
Nov 12, 2026
Withdrawn
via OSV·01:07 PM
Frequently Asked Questions
1
Which Logback deployments are exposed?
Deployments using Logback versions before 1.2.0 are affected if they use the SocketServer or ServerSocketReceiver components.
2
What level of access does an attacker need?
The supplied severity vector indicates exploitation is network-accessible, requires low attack complexity, and requires no privileges or user interaction.
3
Has this Ubuntu vulnerability record been withdrawn?
Yes. The Ubuntu CVE record shows a withdrawn event dated 2026-11-12.