CVE-2006-0743
Apache log4net format string vulnerability causes DoS
CVE-2006-0743 is a medium vulnerability (CVSS 5.0) in Apache Log4net, published March 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.37%, the 93rd percentile. Fixed in log4net 1.2.10.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 6.37%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.10log4net +2 more
Description
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
CVE-2006-0743- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
CVE-2006-0743- Updated
- 2026-11-02
EUVDEUVD-2022-3735No score
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
EUVD-2022-3735- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9fr-w54q-772hNo score
Apache log4net format string vulnerability causes DoS
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
GHSA-f9fr-w54q-772h- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVGHSA-f9fr-w54q-772hNo score
Apache log4net format string vulnerability causes DoS
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
- Record
GHSA-f9fr-w54q-772h- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10072-1No score
log4net-1.2.10-75.6 on GA media
These are all security issues fixed in the log4net-1.2.10-75.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10072-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/22932
vupen.com/english/advisories/2006/0955
novell.com/linux/security/advisories/2006_26_sr.html
issues.apache.org/jira/browse/LOG4NET-67
osvdb.org/23905
Show 10 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/25196
securityfocus.com/bid/17095
nvd.nist.gov/vuln/detail/CVE-2006-0743
github.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8
web.archive.org/web/20070114054835/http://www.novell.com/linux/security/advisories/2006_26_sr.html
suse.com/security/cve/CVE-2006-0743