Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Together with a customer, we figured out a crash of the CVE-2021-44228 Log4j Checkmk from the Checkmk Exchange Site: https://exchange.checkmk.com/p/cve-2021-44228-log4j

Screenshot of CVE-2021-44228-log4j service in an Unknown state.Image Modified

Screenshot of a crash report stating TypeError not supported between instances of tuple and int.Image Modified


The problem seems to be the incomplete agent output:

...

The Powershell script returns only the incomplete output. That's why we need to execute the log4j2-scan.exe

Screenshot of log4j2-scan.exe with a vcruntime104.dll was not found.Image Modified

To solve this, you can use this manual: https://answers.microsoft.com/en-us/windows/forum/all/vcruntime140dll-was-not-found/f43d5afd-9239-4913-8f32-20e44a959e13

...