Apache log4net format string vulnerability causes DoS

MITTEL 5.0CVE-2006-0743 · GHSA-f9fr-w54q-772h · Published 09/03/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-0743 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in log4net, log4net (apache).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.4%, höher als bei 93.7% aller Schwachstellen.
Abhilfe: auf 1.2.10 oder neuer aktualisieren.

Package	Affected versions	Patched versions
log4net NuGet	`< 1.2.10`	`1.2.10`
log4net apache	`= 1.2.9_beta`	No fix yet

Description

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

NVD description

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

References

nvd.nist.gov/vuln/detail/CVE-2006-0743 · ADVISORY
apache/logging-log4net commit ea3faab · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/25196 · WEB
apache/logging-log4net · PACKAGE
web.archive.org/web/20070114054835/http://www.novell.com/linux/security/advisories/2006_26_sr.html · WEB
web.archive.org/web/20140304060609/https://issues.apache.org/jira/browse/LOG4NET-67 · WEB
web.archive.org/web/20200229022118/http://www.securityfocus.com/bid/17095 · WEB
issues.apache.org/jira/browse/LOG4NET-67 · Patch
secunia.com/advisories/19241 · Patch
secunia.com/advisories/22932 · Vendor Advisory
novell.com/linux/security/advisories/2006_26_sr.html

Weitere Schwachstellen in log4net

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free