{"action":"Upgrade log4net to 1.2.10 or later.","affected":[{"fixed":"1.2.10","introduced":"0"}],"component":"log4net","cve_ids":["CVE-2006-0743"],"ecosystem":"NuGet","epss":0.06371,"exploited":false,"fixed_versions":["1.2.10"],"ghsa_id":"GHSA-f9fr-w54q-772h","id":"tcs_01M5N8M8AGTNEBPMT6773BW3PG","modified_at":"2024-02-09T22:26:39.756448Z","published_at":"2022-05-01T06:42:27Z","references":["https://osv.dev/vulnerability/GHSA-f9fr-w54q-772h","https://nvd.nist.gov/vuln/detail/CVE-2006-0743","https://github.com/apache/logging-log4net/commit/ea3faab25fe5f1d4dbda9f5da8dcfa6fc3d9e1b8","https://exchange.xforce.ibmcloud.com/vulnerabilities/25196","https://github.com/apache/logging-log4net","https://web.archive.org/web/20070114054835/http://www.novell.com/linux/security/advisories/2006_26_sr.html","https://web.archive.org/web/20140304060609/https://issues.apache.org/jira/browse/LOG4NET-67","https://web.archive.org/web/20200229022118/http://www.securityfocus.com/bid/17095"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f9fr-w54q-772h","url":"https://osv.dev/vulnerability/GHSA-f9fr-w54q-772h"}],"summary":"Apache log4net format string vulnerability causes DoS"}