What is GHSA-f9fr-w54q-772h?

GHSA-f9fr-w54q-772h is a security advisory published by GitHub Security Advisories with Medium severity. Apache log4net format string vulnerability causes DoS

Which CVE IDs does GHSA-f9fr-w54q-772h cover?

GHSA-f9fr-w54q-772h covers the following CVE IDs: CVE-2006-0743. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-f9fr-w54q-772h?

GHSA-f9fr-w54q-772h affects 1 product, including: nuget/log4net:\u003c= 1.2.9.

GHSA-f9fr-w54q-772hMedium

Apache log4net format string vulnerability causes DoS

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

February 9, 2024

🔗 CVE IDs covered (1)

CVE-2006-0743 →

📋 Description

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

🎯 Affected products1

nuget/log4net:<= 1.2.9

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2006-0743
https://exchange.xforce.ibmcloud.com/vulnerabilities/25196
https://github.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8
https://web.archive.org/web/20070114054835/http://www.novell.com/linux/security/advisories/2006_26_sr.html
https://web.archive.org/web/20140304060609/https://issues.apache.org/jira/browse/LOG4NET-67
https://web.archive.org/web/20200229022118/http://www.securityfocus.com/bid/17095
https://github.com/advisories/GHSA-f9fr-w54q-772h