search

mbechler / marshalsec

MIT License
3.39k stars 680 forks source link

Cast Exception on server #31

Closed NOcturnais closed 2 years ago

NOcturnais commented 2 years ago

On my test minecraft server where I runned the "command", I get this image

famez commented 2 years ago

Hi,

I had the same issue, it seems that some java versions (Check with #java -version) are not affected.

For example, I tried with version 8u191 and I had the same message as you.

8u181 version worked for me.

You can check which versions are affected here: https://www.lunasec.io/docs/blog/log4j-zero-day/

They say: "JDK versions greater than 6u211, 7u201, 8u191, and 11.0.1 are not affected by the LDAP attack vector". But I think that the mentioned versions are also not affected.

NOcturnais commented 2 years ago

I'm using jre8u281 so yes, I think it's not affected ^^"