CVE-2009-3736: GNU Libtool

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

Affected products

• GNU Libtool: version 1.5 only; version 1.5.2 only; version 1.5.4 only; version 1.5.6 only; version 1.5.8 only; version 1.5.10 only; …

Published 2009-11-29. Last modified 2026-06-16.