Apache log4net format string vulnerability causes DoS

MOYENNE 5.0CVE-2006-0743 · GHSA-f9fr-w54q-772h · Published 09/03/2006 · updated 16/06/2026

En bref

CVE-2006-0743 est une vulnérabilité MOYENNE (CVSS 5.0) touchant log4net, log4net (apache).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 6.4%, plus élevée que 93.7% des vulnérabilités.
Correctif : mettre à jour vers 1.2.10 ou plus récent.

Package	Affected versions	Patched versions
log4net NuGet	`< 1.2.10`	`1.2.10`
log4net apache	`= 1.2.9_beta`	No fix yet

Description

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

NVD description

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

References

nvd.nist.gov/vuln/detail/CVE-2006-0743 · ADVISORY
apache/logging-log4net commit ea3faab · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/25196 · WEB
apache/logging-log4net · PACKAGE
web.archive.org/web/20070114054835/http://www.novell.com/linux/security/advisories/2006_26_sr.html · WEB
web.archive.org/web/20140304060609/https://issues.apache.org/jira/browse/LOG4NET-67 · WEB
web.archive.org/web/20200229022118/http://www.securityfocus.com/bid/17095 · WEB
issues.apache.org/jira/browse/LOG4NET-67 · Patch
secunia.com/advisories/19241 · Patch
secunia.com/advisories/22932 · Vendor Advisory
novell.com/linux/security/advisories/2006_26_sr.html

Autres vulnérabilités de log4net

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free