ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libgcj-srcUpgrade libtool-libsUpgrade gcc-gfortranUpgrade libobjcUpgrade libmudflapUpgrade libf2cUpgrade cppUpgrade libgccUpgrade libstdc++Upgrade gcc-objc++Upgrade gcc-g77Upgrade libgcj-develUpgrade libgcj4-develUpgrade gcc-javaUpgrade libtoolUpgrade gccUpgrade libgompUpgrade libgcjUpgrade gcc-gnatUpgrade libgfortranUpgrade gcc4-c++Upgrade gcc4-javaUpgrade libmudflap-develUpgrade gcc4-gfortranUpgrade libgnatUpgrade libstdc++-develUpgrade gcc-c++Upgrade libgcj4-srcUpgrade libgcj4Upgrade gcc4 | Dec 1, 2016 | Nov 29, 2009 |
| Debian | — | Upgrade openmpiUpgrade graphicsmagickUpgrade herculesUpgrade lamUpgrade ggobiUpgrade parser-mysqlUpgrade clamavUpgrade heartbeatUpgrade pinballUpgrade libpreludeUpgrade hypreUpgrade gnu-smalltalkUpgrade mp4hUpgrade sdccUpgrade libextractorUpgrade jagsUpgrade graphvizUpgrade redlandUpgrade libtoolUpgrade synfigUpgrade xmlsec1Upgrade imagemagickUpgrade collectdUpgrade parserUpgrade hamlib | Jul 30, 2024 | Nov 29, 2009 |
| Freebsd | — | Upgrade libtool | Dec 10, 2025 | Nov 28, 2009 |
| Gentoo Linux | — | Upgrade app-text/gv.Upgrade app-arch/ncompress.Upgrade dev-lang/tk.Upgrade app-misc/beanstalkd.Upgrade app-text/dvipng.Upgrade dev-libs/liblzw.Upgrade net-misc/iputils.Upgrade net-mail/mlmmj.Upgrade dev-util/insight.Upgrade app-arch/gzip.Upgrade x11-misc/slim.Upgrade net-ftp/lftp.Upgrade app-antivirus/bitdefender-console.Upgrade dev-perl/perl-tk.Upgrade sys-block/partimage.Upgrade sys-auth/pam_krb5.Upgrade media-tv/dvbstreamer.Upgrade sys-devel/m4.Upgrade kde-base/kdm.Upgrade sys-apps/acl.Upgrade x11-libs/gtk+.Upgrade www-client/uzbl.Upgrade sys-apps/pmount.Upgrade x11-apps/xinit.Upgrade kde-base/kget.Upgrade media-gfx/splashutils.Upgrade dev-util/sourcenav.Upgrade media-gfx/graphicsmagick. | Oct 30, 2017 | Nov 29, 2009 |
| Oracle_linux | — | Upgrade libgccUpgrade libgcjUpgrade gcc-objcUpgrade libtoolUpgrade libgcj-develUpgrade libatomic-staticUpgrade libitm-staticUpgrade libstdc++Upgrade gcc-gnatUpgrade gcc-c++Upgrade libquadmath-staticUpgrade libtool-ltdlUpgrade gcc-gfortranUpgrade libgfortran-staticUpgrade gcc-javaUpgrade libmudflapUpgrade libmudflap-static | Oct 16, 2024 | Nov 27, 2009 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 16, 2009 |
| Suse | — | Upgrade libltdl7-x86Upgrade libtoolUpgrade libtool-x86Upgrade libltdl7-32bitUpgrade libtool-32bitUpgrade libltdl7 | Feb 17, 2015 | Jun 28, 2013 |
| Vmsa 2010 0009 1 Service Console Package Gcc | — | Upgrade VMware ESX 4.0 to build number 256968Upgrade VMware ESX 3.5 to build number 213532 | Sep 2, 2010 | Nov 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub