Critical Vulnerability In Java log4j Affecting PFSense?

JamesTek · Dec 11, 2021, 7:12 AM

Can anyone confirm if this is affecting PFSense.

Not sure if its related but i have woke up this morning to 90% memory usage as to 11% yesterday.

CCNewb · Dec 11, 2021, 8:07 AM

I also came to the forums to ask this same question.

A few IOT devices today went offline and back online, which rarely / never happens, was very odd then I read about this massive vulnerability.

Can PFSense provide any input?

stephenw10 · Dec 11, 2021, 2:29 PM

Your memory usage is unrelated.

pfSense does not include log4j neither do any of the available packages.
log4j is not even in our repo so to be affected you would have to have manually installed it from the FreeBSD repo and configured it to be listening somewhere.

Steve