CVE-2009-4014

CWE-134 — Uncontrolled Format String8 documents7 sources
Severity
7.5HIGH
EPSS
2.0%
top 16.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Lintian
Timeline
PublishedFeb 2
Latest updateMay 2

Description

Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debianlintian< 2.3.2+3
▶NVDdebian/lintian61 versions+60

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-w9gf-w4gv-5j2q: Multiple format string vulnerabilities in Lintian 1↗2022-05-02
▶
OSV
CVE-2009-4014: Multiple format string vulnerabilities in Lintian 1↗2010-02-02
▶
CVEList
CVE-2009-4014: Multiple format string vulnerabilities in Lintian 1↗2010-02-02
▶

📋Vendor Advisories

2
Ubuntu
lintian vulnerabilities↗2010-01-28
▶
Debian
CVE-2009-4014: lintian - Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x...↗2009
▶

🕵️Threat Intelligence

2
Talos
Rule release for today - January 27th 2009↗2009-01-27
▶
Talos
Rule release for today - January 27th 2009↗2009-01-27
▶