Skip to content

CVE-2000-0867

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings,...

7.2 High

CVE-2000-0867 is a high vulnerability (CVSS 7.2) in Debian Linux, published November 14, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 34th percentile. No source names a fixed version.

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Exploit likelihood

0.41%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Record: CVE-2000-0867
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Record: CVE-2000-0867
Updated: 2026-11-02

EUVDEUVD-2000-0854 No score

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Record: EUVD-2000-0854
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6723-fv38-7gcj No score

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings,...

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Record: GHSA-6723-fv38-7gcj
Updated: 2026-11-02

Affected products

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References

Show 4 moreShow less