CVE-2009-4014

2022-10-0316:24:04

Debian Security Bug Tracker

security-tracker.debian.org

format string vulnerabilities

lintian

remote attackers

check scripts

lintian::schedule module

unix

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.7%

JSON

Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.

OSVersionArchitecturePackageVersionFilename
Debian12alllintian< 2.3.2lintian_2.3.2_all.deb
Debian11alllintian< 2.3.2lintian_2.3.2_all.deb
Debian999alllintian< 2.3.2lintian_2.3.2_all.deb
Debian13alllintian< 2.3.2lintian_2.3.2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	lintian	< 2.3.2	lintian_2.3.2_all.deb
Debian	11	all	lintian	< 2.3.2	lintian_2.3.2_all.deb
Debian	999	all	lintian	< 2.3.2	lintian_2.3.2_all.deb
Debian	13	all	lintian	< 2.3.2	lintian_2.3.2_all.deb