CVE-2006-0743

描述

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

如何修補 CVE-2006-0743

要修補 CVE-2006-0743,請將受影響套件升級到下列已修補版本。

• NuGet/log4net—升級至 1.2.10 或更新版本

CVE-2006-0743 正在被利用嗎?

中等 — EPSS 為 6.2%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 1.2.10

參考連結(7)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2006-0743
• PATCHgithub.com/apache/logging-log4net
• WEBexchange.xforce.ibmcloud.com/vulnerabilities/25196
• WEBgithub.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8