[LOG4J2-2402] NTEventLogAppender has security issues

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 2.4.1
• Component/s: Appenders

Environment

Windows 2012 R2

Windows 2010

• Assignee: Unassigned
• Reporter: Rolando Sanchez Villalobos
• Created: 08/Aug/18 20:45
• Updated: 09/Aug/18 03:15
• Resolved: 09/Aug/18 03:14

Description

The NTEventLogAppender.amd64.dll was reviewed by security testers and showed the following issues

• Executable not signed or code signature missing.
• No Address Space Layout Randomization (ASLR).
• Software Enforce Data Execution Prevention (DEP) Enabled.