CVE-2009-4014

NameCVE-2009-4014
DescriptionMultiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1979-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
lintian (PTS)jessie2.5.30+deb8u4fixed
stretch2.5.50.4fixed
buster2.15.0fixed
bullseye2.104.0fixed
bookworm2.116.3fixed
sid, trixie2.120.0fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
lintiansourceetch1.23.28+etch1DSA-1979-1
lintiansourcelenny1.24.2.1+lenny1DSA-1979-1
lintiansource(unstable)2.3.2medium
Search for package or bug name: Reporting problems