SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 70977: The SAS® Integration Technologies client contains a version of the Log4net DLL file with known vulnerabilities

DetailsHotfixAboutRate It

Severity: High

Description: The SAS Integration Technologies client contains a version of Log4net that is known to be affected by the vulnerability described in CVE-2018-1285.

Potential Impact: Refer to the linked CVE record above for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Integration Technologies ClientMicrosoft® Windows® for x649.519.4 TS1M8
Microsoft Windows 8 Enterprise 32-bit9.519.4 TS1M8
Microsoft Windows 8 Enterprise x649.519.4 TS1M8
Microsoft Windows 8 Pro 32-bit9.519.4 TS1M8
Microsoft Windows 8 Pro x649.519.4 TS1M8
Microsoft Windows 8.1 Enterprise 32-bit9.519.4 TS1M8
Microsoft Windows 8.1 Enterprise x649.519.4 TS1M8
Microsoft Windows 8.1 Pro 32-bit9.519.4 TS1M8
Microsoft Windows 8.1 Pro x649.519.4 TS1M8
Microsoft Windows 109.519.4 TS1M8
Microsoft Windows 119.519.4 TS1M8
Microsoft Windows Server 20089.519.4 TS1M8
Microsoft Windows Server 2008 R29.519.4 TS1M8
Microsoft Windows Server 2008 for x649.519.4 TS1M8
Microsoft Windows Server 2012 Datacenter9.519.4 TS1M8
Microsoft Windows Server 2012 R2 Datacenter9.519.4 TS1M8
Microsoft Windows Server 2012 R2 Std9.519.4 TS1M8
Microsoft Windows Server 2012 Std9.519.4 TS1M8
Microsoft Windows Server 20169.519.4 TS1M8
Microsoft Windows Server 20199.519.4 TS1M8
Microsoft Windows Server 20229.519.4 TS1M8
Windows 7 Enterprise 32 bit9.519.4 TS1M8
Windows 7 Enterprise x649.519.4 TS1M8
Windows 7 Home Premium 32 bit9.519.4 TS1M8
Windows 7 Home Premium x649.519.4 TS1M8
Windows 7 Professional 32 bit9.519.4 TS1M8
Windows 7 Professional x649.519.4 TS1M8
Windows 7 Ultimate 32 bit9.519.4 TS1M8
Windows 7 Ultimate x649.519.4 TS1M8
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.