CVE-2009-4014
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1...
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
Exploit likelihood
What each source reports
NVD Score used
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
- Record
CVE-2009-4014- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
- Record
CVE-2009-4014- Updated
- 2026-11-02
EUVDEUVD-2009-3985 No score
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
- Record
EUVD-2009-3985- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w9gf-w4gv-5j2q No score
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1...
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
- Record
GHSA-w9gf-w4gv-5j2q- Weakness
- CWE-134
- Updated
- 2026-11-02
OSV No score
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
- Record
CVE-2009-4014- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-4014 No score
Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving (1) check scripts and (2) the Lintian::Schedule module.
- Record
DEBIAN-CVE-2009-4014- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lintianDebian:12 |
before 2.3.2 | 2.3.2 |
lintianDebian:13 |
before 2.3.2 | 2.3.2 |
lintianDebian:14 |
before 2.3.2 | 2.3.2 |
lintianDebian:4.0 From an advisory covering 3 CVEs |
before 1.23.28+etch1, plus listed versions 1.23.28 |
1.23.28+etch1 |
lintianDebian:5.0 From an advisory covering 3 CVEs |
before 1.24.2.1+lenny1, plus listed versions 1.24.2.1 |
1.24.2.1+lenny1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4014 is a high vulnerability (CVSS 7.5) in Debian Lintian, published January 27, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.06%, the 87th percentile. Fixed in lintian 2.3.2.
References
secunia.com/advisories/38379
git.debian.org?p=lintian/lintian.git%3Ba=commit%3Bh=fbe0c92b2ef7e360d13414bf40d6af5507d0c86d
packages.qa.debian.org/l/lintian/news/20100128T015554Z.html
packages.debian.org/changelogs/pool/main/l/lintian/lintian_2.3.2/changelog
debian.org/security/2010/dsa-1979
Show 8 moreShow less
securityfocus.com/bid/37975
ubuntu.com/usn/USN-891-1
nvd.nist.gov/vuln/detail/CVE-2009-4014
github.com/advisories/GHSA-w9gf-w4gv-5j2q
security-tracker.debian.org/tracker/CVE-2009-4014