LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.
Conclusion & alert: CVE-2001-0738 is rated Moderate Risk (49.4/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 1.58%). Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-01-23 | 0.60% | 1.58% | +0.98% |
| 2 | 2025-09-29 | 0.82% | 0.60% | -0.22% |
| 3 | 2025-03-30 | — | 0.82% | — |
Full EPSS history (9 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 5.0 | 2.0 | MEDIUM |
|
10.0 | 2.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| immunix | immunix | 6.2 | cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:* |
| immunix | immunix | 7.0 | cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:* |
| immunix | immunix | 7.0_beta | cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:* |
| debian | debian_linux | 1.3 | cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:* |
| debian | debian_linux | 2.2 | cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-026-01 | |
| http://marc.info/?l=bugtraq&m=99258618906506&w=2 | |
| http://www.kb.cert.org/vuls/id/249579 | Patch Third Party Advisory US Government Resource |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/7098 |