Log4j scan for Linux

Apache Log4j vulnerability

Log4j querying on Linux-based systems

On Linux-based systems, check for the presence of "Log4j" remnants on your system using the following commands IF you have applications on your system that use the "log4j" library, update to version 2.17 of "Log4j".

sudo find / -name 'log4j*'

dpkg -l | grep liblog4j

dpkg -l | grep log4

locate log4j|grep -v log4js

locate log4j|grep -v log4jsv

Use the GITHUB link below to check if the applications detected as a result of the scan are affected by the vulnerability

log4j-affected-db/SOFTWARE-LIST.md at develop · cisagov/log4j-affected-db · GitHub

Sincerely
Arif Akyüz
Senior Information Technologies System and Network Specialist