CVE-2019-17571

CVE-2019-17571 is a critical deserialization vulnerability in Log4j versions up to 1.2.17, specifically within the SocketServer class, which can lead to remote code execution when processing untrusted network traffic. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While it affects various products from vendors like Apache, Canonical, and Oracle, there is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is not available. Despite this, the vulnerability has garnered significant community discussion and media coverage, often in the context of the more recent Log4Shell (CVE-2021-44228) vulnerability.