CVE catalog

CVE-2002-1914

dump: CVE-2002-1914

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 25, 2026

dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandumpsid0.4b56-1fixed
Debiandumpforky0.4b56-1fixed
Debiandumptrixie0.4b49-2fixed
Debiandumpbookworm0.4b47-4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandumpsourcesid0.4b31-1not yet assignedNot reportedNot reported
Debiandumpsourceforky0.4b31-1not yet assignedNot reportedNot reported
Debiandumpsourcetrixie0.4b31-1not yet assignedNot reportedNot reported
Debiandumpsourcebookworm0.4b31-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dump]Fixed
    Details (2)
    • 0.4b47-4 · amd64 · bookworm

      Fixed · Fixed: 0.4b31-1

      dsa · dump · debian · bookworm; dsa · dump · debian · 12

    • 0.4b47-4 · arm64 · bookworm

      Fixed · Fixed: 0.4b31-1

      dsa · dump · debian · bookworm; dsa · dump · debian · 12

[Debian 13 (Trixie)]

  • [dump]Fixed
    Details (4)
    • 0.4b49-2 · amd64 · trixie

      Fixed · Fixed: 0.4b31-1

      dsa · dump · debian · 13

    • 0.4b49-2 · arm64 · trixie

      Fixed · Fixed: 0.4b31-1

      dsa · dump · debian · 13

    • 0.4b54-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 0.4b31-1

      dsa · dump · debian · 13

    • 0.4b54-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 0.4b31-1

      dsa · dump · debian · 13

Observed:

References