CVE-2017-5645

CVSS v3.1 9.8 (Critical)
98% Progress
CVSS v2.0 7.5 (High)
75% Progress
EPSS 87.38 % (99th)
87.38% Progress
Affected Products 79
Advisories 12

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

Weaknesses
CWE-502
Deserialization of Untrusted Data
CVE Status
PUBLISHED
CNA
Apache Software Foundation
Published Date
2017-04-17 21:59:00
(7 years ago)
Updated Date
2023-11-07 02:49:28
(10 months ago)

Affected Products

Loading...
Loading...
Loading...

Configuration #1

    CPE23 From Up To
  Apache Log4j from 2.0 version and prior 2.8.2 version cpe:2.3:a:apache:log4j >= 2.0 < 2.8.2

Configuration #2

    CPE23 From Up To
  Netapp Oncommand Api Services cpe:2.3:a:netapp:oncommand_api_services:-
  Netapp Oncommand Insight cpe:2.3:a:netapp:oncommand_insight:-
  Netapp Oncommand Workflow Automation cpe:2.3:a:netapp:oncommand_workflow_automation:-
  Netapp Service Level Manager cpe:2.3:a:netapp:service_level_manager:-
  Netapp Snapcenter cpe:2.3:a:netapp:snapcenter:-
  Netapp Storage Automation Store cpe:2.3:a:netapp:storage_automation_store:-

Configuration #3

    CPE23 From Up To
  Redhat Fuse 1.0 cpe:2.3:a:redhat:fuse:1.0
  Redhat Enterprise Linux 6.0 cpe:2.3:o:redhat:enterprise_linux:6.0
  Redhat Enterprise Linux 6.7 cpe:2.3:o:redhat:enterprise_linux:6.7
  Redhat Enterprise Linux 7.0 cpe:2.3:o:redhat:enterprise_linux:7.0
  Redhat Enterprise Linux 7.3 cpe:2.3:o:redhat:enterprise_linux:7.3
  Redhat Enterprise Linux 7.4 cpe:2.3:o:redhat:enterprise_linux:7.4
  Redhat Enterprise Linux 7.5 cpe:2.3:o:redhat:enterprise_linux:7.5
  Redhat Enterprise Linux 7.6 cpe:2.3:o:redhat:enterprise_linux:7.6
  Redhat Enterprise Linux Desktop 7.0 cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
  Redhat Enterprise Linux Server 7.0 cpe:2.3:o:redhat:enterprise_linux_server:7.0
  Redhat Enterprise Linux Server Aus 7.4 cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
  Redhat Enterprise Linux Server Aus 7.6 cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
  Redhat Enterprise Linux Server Eus 7.4 cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
  Redhat Enterprise Linux Server Eus 7.5 cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
  Redhat Enterprise Linux Server Eus 7.6 cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
  Redhat Enterprise Linux Server Tus 7.4 cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
  Redhat Enterprise Linux Server Tus 7.6 cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
  Redhat Enterprise Linux Workstation 7.0 cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Configuration #4

    CPE23 From Up To
  Oracle Api Gateway 11.1.2.4.0 cpe:2.3:a:oracle:api_gateway:11.1.2.4.0
  Oracle Application Testing Suite 13.3.0.1 cpe:2.3:a:oracle:application_testing_suite:13.3.0.1
  Oracle Autovue Vuelink Integration 21.0.0 cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.0
  Oracle Autovue Vuelink Integration 21.0.1 cpe:2.3:a:oracle:autovue_vuelink_integration:21.0.1
  Oracle Banking Platform 2.6.0 cpe:2.3:a:oracle:banking_platform:2.6.0
  Oracle Banking Platform 2.6.1 cpe:2.3:a:oracle:banking_platform:2.6.1
  Oracle Banking Platform 2.6.2 cpe:2.3:a:oracle:banking_platform:2.6.2
  Oracle Bi Publisher 11.1.1.7.0 cpe:2.3:a:oracle:bi_publisher:11.1.1.7.0
  Oracle Bi Publisher 11.1.1.9.0 cpe:2.3:a:oracle:bi_publisher:11.1.1.9.0
  Oracle Bi Publisher 12.2.1.3.0 cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0
  Oracle Bi Publisher 12.2.1.4.0 cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0
  Oracle Communications Converged Application Server - Service Controller 6.1 cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.1
  Oracle Communications Instant Messaging Server 10.0.1.3.0 cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.3.0
  Oracle Communications Interactive Session Recorder from 6.0 version and 6.2 and prior versions cpe:2.3:a:oracle:communications_interactive_session_recorder >= 6.0 <= 6.2
  Oracle Communications Messaging Server prior 8.0.2 version cpe:2.3:a:oracle:communications_messaging_server < 8.0.2
  Oracle Communications Network Integrity from 7.3.2 version and 7.3.6 and prior versions cpe:2.3:a:oracle:communications_network_integrity >= 7.3.2 <= 7.3.6
  Oracle Communications Online Mediation Controller 6.1 cpe:2.3:a:oracle:communications_online_mediation_controller:6.1
  Oracle Communications Pricing Design Center 11.1 cpe:2.3:a:oracle:communications_pricing_design_center:11.1
  Oracle Communications Pricing Design Center 12.0 cpe:2.3:a:oracle:communications_pricing_design_center:12.0
  Oracle Communications Service Broker 6.0 cpe:2.3:a:oracle:communications_service_broker:6.0
  Oracle Communications Webrtc Session Controller prior 7.2 version cpe:2.3:a:oracle:communications_webrtc_session_controller < 7.2
  Oracle Configuration Manager 12.1.2.0.2 cpe:2.3:a:oracle:configuration_manager:12.1.2.0.2
  Oracle Configuration Manager 12.1.2.0.5 cpe:2.3:a:oracle:configuration_manager:12.1.2.0.5
  Oracle Endeca Information Discovery Studio 3.2.0 cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0
  Oracle Enterprise Data Quality 12.2.1.3.0 cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0
  Oracle Enterprise Manager Base Platform 12.1.0.5 cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5
  Oracle Enterprise Manager Base Platform 13.2.0.0 cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0
  Oracle Enterprise Manager for Fusion Middleware 12.1.0.5 cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:12.1.0.5
  Oracle Enterprise Manager for Fusion Middleware 13.2.0.0 cpe:2.3:a:oracle:enterprise_manager_for_fusion_middleware:13.2.0.0
  Oracle Enterprise Manager for Mysql Database 13.2.2.0.0 and prior versions cpe:2.3:a:oracle:enterprise_manager_for_mysql_database <= 13.2.2.0.0
  Enterprise Manager for Oracle Database 12.1.0.8 cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:12.1.0.8
  Enterprise Manager for Oracle Database 13.2.2 cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:13.2.2
  Oracle Enterprise Manager for Peoplesoft 13.1.1.1 cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.1.1.1
  Oracle Enterprise Manager for Peoplesoft 13.2.1.1 cpe:2.3:a:oracle:enterprise_manager_for_peoplesoft:13.2.1.1
  Oracle Financial Services Analytical Applications Infrastructure from 7.3.3.0.0 version and 7.3.3.0.2 and prior versions cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure >= 7.3.3.0.0 <= 7.3.3.0.2
  Oracle Financial Services Analytical Applications Infrastructure from 8.0.0.0.0 version and 8.0.7.0.0 and prior versions cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure >= 8.0.0.0.0 <= 8.0.7.0.0
  Oracle Financial Services Behavior Detection Platform from 8.0.0.0.0 version and 8.0.4.0.0 and prior versions cpe:2.3:a:oracle:financial_services_behavior_detection_platform >= 8.0.0.0.0 <= 8.0.4.0.0
  Oracle Financial Services Behavior Detection Platform 6.1.1 cpe:2.3:a:oracle:financial_services_behavior_detection_platform:6.1.1
  Oracle Financial Services Hedge Management And Ifrs Valuations 8.0.4 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.4
  Oracle Financial Services Hedge Management And Ifrs Valuations 8.0.5 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.0.5
  Oracle Financial Services Lending And Leasing from 14.1.0 version and 14.8.0 and prior versions cpe:2.3:a:oracle:financial_services_lending_and_leasing >= 14.1.0 <= 14.8.0
  Oracle Financial Services Lending And Leasing 12.5.0 cpe:2.3:a:oracle:financial_services_lending_and_leasing:12.5.0
  Oracle Financial Services Loan Loss Forecasting And Provisioning 8.0.4 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.4
  Oracle Financial Services Loan Loss Forecasting And Provisioning 8.0.5 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.0.5
  Oracle Financial Services Profitability Management from 8.0.0.0.0 version and 8.0.7.0.0 and prior versions cpe:2.3:a:oracle:financial_services_profitability_management >= 8.0.0.0.0 <= 8.0.7.0.0
  Oracle Financial Services Profitability Management 6.1.1 cpe:2.3:a:oracle:financial_services_profitability_management:6.1.1
  Oracle Financial Services Regulatory Reporting With Agilereporter 8.0.9.2.0 cpe:2.3:a:oracle:financial_services_regulatory_reporting_with_agilereporter:8.0.9.2.0
  Oracle Flexcube Investor Servicing 12.0.4 cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4
  Oracle Flexcube Investor Servicing 12.1.0 cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0
  Oracle Flexcube Investor Servicing 12.3.0 cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0
  Oracle Flexcube Investor Servicing 12.4.0 cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0
  Oracle Flexcube Investor Servicing 14.0.0 cpe:2.3:a:oracle:flexcube_investor_servicing:14.0.0
  Oracle Fusion Middleware Mapviewer 12.2.1.2 cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.2
  Oracle Fusion Middleware Mapviewer 12.2.1.3 cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3
  Oracle Goldengate 12.3.2.1.1 cpe:2.3:a:oracle:goldengate:12.3.2.1.1
  Oracle Goldengate Application Adapters 12.3.2.1.1 cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.1
  Oracle Identity Analytics 11.1.1.5.8 cpe:2.3:a:oracle:identity_analytics:11.1.1.5.8
  Oracle Identity Management Suite 11.1.2.3.0 cpe:2.3:a:oracle:identity_management_suite:11.1.2.3.0
  Oracle Identity Management Suite 12.2.1.3.0 cpe:2.3:a:oracle:identity_management_suite:12.2.1.3.0
  Oracle Identity Manager Connector 9.0 cpe:2.3:a:oracle:identity_manager_connector:9.0
  Oracle In-memory Performance-driven Planning 12.1 cpe:2.3:a:oracle:in-memory_performance-driven_planning:12.1
  Oracle In-memory Performance-driven Planning 12.2 cpe:2.3:a:oracle:in-memory_performance-driven_planning:12.2
  Oracle Instantis Enterprisetrack from 17.1 version and 17.3 and prior versions cpe:2.3:a:oracle:instantis_enterprisetrack >= 17.1 <= 17.3
  Oracle Insurance Calculation Engine 10.1.1 cpe:2.3:a:oracle:insurance_calculation_engine:10.1.1
  Oracle Insurance Calculation Engine 10.2.1 cpe:2.3:a:oracle:insurance_calculation_engine:10.2.1
  Oracle Insurance Policy Administration 10.0 cpe:2.3:a:oracle:insurance_policy_administration:10.0
  Oracle Insurance Policy Administration 10.1 cpe:2.3:a:oracle:insurance_policy_administration:10.1
  Oracle Insurance Policy Administration 10.2 cpe:2.3:a:oracle:insurance_policy_administration:10.2
  Oracle Insurance Policy Administration 11.0 cpe:2.3:a:oracle:insurance_policy_administration:11.0
  Oracle Insurance Rules Palette 10.0 cpe:2.3:a:oracle:insurance_rules_palette:10.0
  Oracle Insurance Rules Palette 10.1 cpe:2.3:a:oracle:insurance_rules_palette:10.1
  Oracle Insurance Rules Palette 10.2 cpe:2.3:a:oracle:insurance_rules_palette:10.2
  Oracle Insurance Rules Palette 11.0 cpe:2.3:a:oracle:insurance_rules_palette:11.0
  Oracle Insurance Rules Palette 11.1 cpe:2.3:a:oracle:insurance_rules_palette:11.1
  Oracle Jd Edwards Enterpriseone Tools 4.0.1.0 cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0
  Oracle Jd Edwards Enterpriseone Tools 9.2 cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
  Oracle Jdeveloper 11.1.1.9.0 cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0
  Oracle Jdeveloper 12.1.3.0.0 cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0
  Oracle Jdeveloper 12.2.1.3.0 cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0
  Oracle Mysql Enterprise Monitor from 3.4.0.0 version and 3.4.7.4297 and prior versions cpe:2.3:a:oracle:mysql_enterprise_monitor >= 3.4.0.0 <= 3.4.7.4297
  Oracle Mysql Enterprise Monitor from 4.0.0.0 version and 4.0.4.5235 and prior versions cpe:2.3:a:oracle:mysql_enterprise_monitor >= 4.0.0.0 <= 4.0.4.5235
  Oracle Mysql Enterprise Monitor from 8.0.0.0.0 version and 8.0.0.8131 and prior versions cpe:2.3:a:oracle:mysql_enterprise_monitor >= 8.0.0.0.0 <= 8.0.0.8131
  Oracle Peoplesoft Enterprise Fin Install 9.2 cpe:2.3:a:oracle:peoplesoft_enterprise_fin_install:9.2
  Oracle Policy Automation 10.4.7 cpe:2.3:a:oracle:policy_automation:10.4.7
  Oracle Policy Automation 12.1.0 cpe:2.3:a:oracle:policy_automation:12.1.0
  Oracle Policy Automation 12.1.1 cpe:2.3:a:oracle:policy_automation:12.1.1
  Oracle Policy Automation 12.2.0 cpe:2.3:a:oracle:policy_automation:12.2.0
  Oracle Policy Automation 12.2.1 cpe:2.3:a:oracle:policy_automation:12.2.1
  Oracle Policy Automation 12.2.2 cpe:2.3:a:oracle:policy_automation:12.2.2
  Oracle Policy Automation 12.2.3 cpe:2.3:a:oracle:policy_automation:12.2.3
  Oracle Policy Automation 12.2.4 cpe:2.3:a:oracle:policy_automation:12.2.4
  Oracle Policy Automation 12.2.5 cpe:2.3:a:oracle:policy_automation:12.2.5
  Oracle Policy Automation 12.2.6 cpe:2.3:a:oracle:policy_automation:12.2.6
  Oracle Policy Automation 12.2.7 cpe:2.3:a:oracle:policy_automation:12.2.7
  Oracle Policy Automation 12.2.8 cpe:2.3:a:oracle:policy_automation:12.2.8
  Oracle Policy Automation 12.2.9 cpe:2.3:a:oracle:policy_automation:12.2.9
  Oracle Policy Automation 12.2.10 cpe:2.3:a:oracle:policy_automation:12.2.10
  Oracle Policy Automation Connector for Siebel 10.4.6 cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6
  Oracle Policy Automation for Mobile Devices 10.4.7 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:10.4.7
  Oracle Policy Automation for Mobile Devices 12.1.0 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.1.0
  Oracle Policy Automation for Mobile Devices 12.1.1 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.1.1
  Oracle Policy Automation for Mobile Devices 12.2.0 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.0
  Oracle Policy Automation for Mobile Devices 12.2.1 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.1
  Oracle Policy Automation for Mobile Devices 12.2.2 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.2
  Oracle Policy Automation for Mobile Devices 12.2.3 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.3
  Oracle Policy Automation for Mobile Devices 12.2.4 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.4
  Oracle Policy Automation for Mobile Devices 12.2.5 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.5
  Oracle Policy Automation for Mobile Devices 12.2.6 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.6
  Oracle Policy Automation for Mobile Devices 12.2.7 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.7
  Oracle Policy Automation for Mobile Devices 12.2.8 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.8
  Oracle Policy Automation for Mobile Devices 12.2.9 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.9
  Oracle Policy Automation for Mobile Devices 12.2.10 cpe:2.3:a:oracle:policy_automation_for_mobile_devices:12.2.10
  Oracle Primavera Gateway from 16.2.0 version and 16.2.11 and prior versions cpe:2.3:a:oracle:primavera_gateway >= 16.2.0 <= 16.2.11
  Oracle Primavera Gateway from 17.12.0 version and 17.12.7 and prior versions cpe:2.3:a:oracle:primavera_gateway >= 17.12.0 <= 17.12.7
  Oracle Rapid Planning 12.1 cpe:2.3:a:oracle:rapid_planning:12.1
  Oracle Rapid Planning 12.2 cpe:2.3:a:oracle:rapid_planning:12.2
  Oracle Retail Advanced Inventory Planning 14.0 cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.0
  Oracle Retail Advanced Inventory Planning 15.0 cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0
  Oracle Retail Clearance Optimization Engine 14.0.5 cpe:2.3:a:oracle:retail_clearance_optimization_engine:14.0.5
  Oracle Retail Extract Transform And Load 13.0 cpe:2.3:a:oracle:retail_extract_transform_and_load:13.0
  Oracle Retail Extract Transform And Load 13.1 cpe:2.3:a:oracle:retail_extract_transform_and_load:13.1
  Oracle Retail Extract Transform And Load 13.2 cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2
  Oracle Retail Extract Transform And Load 19.0 cpe:2.3:a:oracle:retail_extract_transform_and_load:19.0
  Oracle Retail Integration Bus 14.0.0 cpe:2.3:a:oracle:retail_integration_bus:14.0.0
  Oracle Retail Integration Bus 14.1.0 cpe:2.3:a:oracle:retail_integration_bus:14.1.0
  Oracle Retail Integration Bus 15.0 cpe:2.3:a:oracle:retail_integration_bus:15.0
  Oracle Retail Integration Bus 16.0 cpe:2.3:a:oracle:retail_integration_bus:16.0
  Oracle Retail Open Commerce Platform 5.3.0 cpe:2.3:a:oracle:retail_open_commerce_platform:5.3.0
  Oracle Retail Open Commerce Platform 6.0.0 cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.0
  Oracle Retail Open Commerce Platform 6.0.1 cpe:2.3:a:oracle:retail_open_commerce_platform:6.0.1
  Oracle Retail Predictive Application Server 15.0.3 cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3
  Oracle Retail Service Backbone 14.1 cpe:2.3:a:oracle:retail_service_backbone:14.1
  Oracle Retail Service Backbone 15.0 cpe:2.3:a:oracle:retail_service_backbone:15.0
  Oracle Retail Service Backbone 16.0 cpe:2.3:a:oracle:retail_service_backbone:16.0
  Oracle Siebel Ui Framework 18.7 cpe:2.3:a:oracle:siebel_ui_framework:18.7
  Oracle Siebel Ui Framework 18.8 cpe:2.3:a:oracle:siebel_ui_framework:18.8
  Oracle Siebel Ui Framework 18.9 cpe:2.3:a:oracle:siebel_ui_framework:18.9
  Oracle Soa Suite 12.1.3.0.0 cpe:2.3:a:oracle:soa_suite:12.1.3.0.0
  Oracle Soa Suite 12.2.1.3.0 cpe:2.3:a:oracle:soa_suite:12.2.1.3.0
  Oracle Soa Suite 12.2.2.0.0 cpe:2.3:a:oracle:soa_suite:12.2.2.0.0
  Oracle Tape Library Acsls 8.4 cpe:2.3:a:oracle:tape_library_acsls:8.4
  Oracle Timesten In-memory Database 11.2.2.8.49 cpe:2.3:a:oracle:timesten_in-memory_database:11.2.2.8.49
  Oracle Utilities Advanced Spatial And Operational Analytics 2.7.0.1 cpe:2.3:a:oracle:utilities_advanced_spatial_and_operational_analytics:2.7.0.1
  Oracle Utilities Work And Asset Management 1.9.1.2.12 cpe:2.3:a:oracle:utilities_work_and_asset_management:1.9.1.2.12
  Oracle Weblogic Server 10.3.6.0.0 cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0
  Oracle Weblogic Server 12.1.3.0.0 cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0
  Oracle Weblogic Server 12.2.1.3.0 cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0
  Oracle Weblogic Server 12.2.1.4.0 cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0
  Oracle Weblogic Server 14.1.1.0.0 cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...