GNU Libtool vulnerabilities

2 CVEs affecting GNU Libtool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3736, published 2009-11-29.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-3736, published 2009-11-29. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory,…
• CVE-2004-0256, published 2004-11-23. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.