High severity8.8NVD Advisory· Published Apr 19, 2022· Updated Jun 17, 2026

CVE-2022-0070

Description

Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Amazon/Log4jhotpatch
cpe:2.3:a:amazon:log4jhotpatch:*:*:*:*:*:*:*:*
Range: <1.1-16
Apache/log4j-cve-2021-44228-hotpatchllm-create
Range: >= 1.1-16
AWS/Log4j hotpatchllm-create
Range: >= 1.1-16
Amazon/log4j-cve-2021-44228-hotpatchcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilitiesnvdExploitThird Party Advisory
alas.aws.amazon.com/cve/html/CVE-2022-0070.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000