CVE-2006-0743
Apache log4net format string vulnerability causes DoS
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
CVE-2006-0743- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
CVE-2006-0743- Updated
- 2026-11-02
EUVDEUVD-2022-3735 No score
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
EUVD-2022-3735- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9fr-w54q-772h No score
Apache log4net format string vulnerability causes DoS
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
GHSA-f9fr-w54q-772h- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVGHSA-f9fr-w54q-772h No score
Apache log4net format string vulnerability causes DoS
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
GHSA-f9fr-w54q-772h- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10072-1 No score
log4net-1.2.10-75.6 on GA media
These are all security issues fixed in the log4net-1.2.10-75.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10072-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0743 is a medium vulnerability (CVSS 5.0) in Apache Log4net, published March 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.37%, the 93rd percentile. Fixed in log4net 1.2.10.
References
secunia.com/advisories/22932
vupen.com/english/advisories/2006/0955
novell.com/linux/security/advisories/2006_26_sr.html
issues.apache.org/jira/browse/LOG4NET-67
osvdb.org/23905
Show 10 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/25196
securityfocus.com/bid/17095
nvd.nist.gov/vuln/detail/CVE-2006-0743
github.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8
web.archive.org/web/20070114054835/http://www.novell.com/linux/security/advisories/2006_26_sr.html
suse.com/security/cve/CVE-2006-0743