[LOG4J2-3230] Certain strings can cause infinite recursion

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8, 2.8.1, 2.8.2, 2.9.0, 2.9.1, 2.10.0, 2.11.0, 2.11.1, 2.11.2, 2.12.0, 2.12.1, 2.13.0, 2.13.1, 2.13.2, 2.14.0, 2.13.3, 2.14.1, 2.15.0, 2.16.0
• Fix Version/s: 2.17.0
• Component/s: Core
• Assignee: Carter Kozak
• Reporter: Ross Cohen
• Created: 15/Dec/21 00:11
• Updated: 26/Dec/21 10:19
• Resolved: 18/Dec/21 02:11

Description

If a string substitution is attempted for any reason on the following string, it will trigger an infinite recursion, and the application will crash: ${${::-${::-$${::-j}}}}.