LI
Product
Lintian
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Lintian to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-4013 | 9.8 | Feb 2 | Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files… Affected: 1.23.0 through 1.23.28; 1.24.0 through 1.24.2.1; 2.0.0 before 2.3.2 |
| CVE-2017-8829 | 7.8 | May 8 | Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source package with a crafted YAML file Affected: through 2.5.50.3 |
| CVE-2013-1429 | 6.3 | Nov 7 | Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks Affected: before 2.5.10.5; 2.5.11 |
| CVE-2009-4015 | – | Feb 2 | Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitrary commands via shell metacharacters in filename arguments Affected: 1.23.0; 1.23.1; 1.23.2; 1.23.3; 1.23.4; 1.23.5; +34 more |
| CVE-2009-4014 | – | Feb 2 | Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via… Affected: 1.23.0; 1.23.1; 1.23.2; 1.23.3; 1.23.4; 1.23.5; +34 more |
| CVE-2004-1000 | – | Jan 10 | lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink… Affected: 1.2_0.17.1 |
Showing 6