LOG4J cve-2021-44228 - DOES IT AFFECT SOFTETHER?

skypurplecloud · Post by **skypurplecloud** » Sat Dec 11, 2021 1:20 pm

Hi ALL,

does this new vulnerability affect SoftEther?

cve-2021-44228 -log4jshell

Thanks.

Retinaquester2 · Post by **Retinaquester2** » Mon Dec 13, 2021 7:16 pm

Same question here, since our SE-VPN sever is obvisously exposed, maybe we can have a comment/sticky about this.
I also noticed a increase in portscans so I am worried.

BobVVue · Post by **BobVVue** » Wed Dec 15, 2021 4:29 pm

Also concerned and will patch if something comes out.

In the mean time, don't know if it helps, but used SE Server Manager, I turned off all LOGGING options Under the Manage Virtual Hub -> Log Save Settings. Never have to look at them anyway, so turned off all logging. Don't know if this helps mitigate the Log4j or not. Anyone?

drkrool · Post by **drkrool** » Wed Dec 15, 2021 5:17 pm

I don't know if it helps, but it isnt coded in Java avcording to this (graph says in C)
https://www.softether.org/9-about/News/800-open-source

Else you might want to run a scanner in the uncompiled open source code or something to make sure

LOG4J cve-2021-44228 - DOES IT AFFECT SOFTETHER?

LOG4J cve-2021-44228 - DOES IT AFFECT SOFTETHER?

Re: LOG4J cve-2021-44228 - DOES IT AFFECT SOFTETHER?

Re: LOG4J cve-2021-44228 - DOES IT AFFECT SOFTETHER?

Re: LOG4J cve-2021-44228 - DOES IT AFFECT SOFTETHER?