CVE catalog

CVE-2009-3736

graphviz: CVE-2009-3736

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlamsid7.1.4-8fixed
Debianlamforky7.1.4-8fixed
Debianlamtrixie7.1.4-7.2fixed
Debianlambookworm7.1.4-7fixed
Debianjagssid4.3.2-2fixed
Debianjagsforky4.3.2-2fixed
Debianjagstrixie4.3.2-1fixed
Debianjagsbookworm4.3.1-1fixed
Debianmp4hsid1.3.1-17.3fixed
Debianmp4hforky1.3.1-17.3fixed
Debianmp4htrixie1.3.1-17.2fixed
Debianmp4hbookworm1.3.1-17fixed
Debianpdshsid2.36-1not affected
Debianpdshforky2.36-1not affected
Debianpdshtrixie2.35-2not affected
Debianpdshbookworm2.34-0.2not affected
Debiansdccsid4.5.0+dfsg-4fixed
Debiansdccforky4.5.0+dfsg-4fixed
Debiansdcctrixie4.5.0+dfsg-1fixed
Debiansdccbookworm4.2.0+dfsg-1fixed
Debianbochssid3.1+dfsg-1not affected
Debianbochsforky3.1+dfsg-1not affected
Debianbochstrixie3.0+dfsg-1not affected
Debianbochsbookworm2.7+dfsg-4+deb12u1not affected
Debianggobibookworm2.1.11-2fixed
Debianhypresid3.1.0-4fixed
Debianhypreforky3.1.0-4fixed
Debianhypretrixie2.32.0-4fixed
Debianhyprebookworm2.26.0-3fixed
Debianclamavsid1.4.6+dfsg-1fixed
Debianclamavforky1.4.6+dfsg-1fixed
Debianclamavtrixie1.4.3+dfsg-1fixed
Debianclamavbookworm1.4.3+dfsg-1~deb12u2fixed
Debianclamavbookworm-security1.4.6+dfsg-0+deb12u1fixed
Debianhamlibsid4.7.2-2fixed
Debianhamlibforky4.7.2-2fixed
Debianhamlibtrixie4.6.2-1fixed
Debianhamlibbookworm4.5.4-1fixed
Debianparsersid3.5.1-3fixed
Debianparserforky3.5.1-3fixed
Debianparsertrixie3.5.1-2fixed
Debianparserbookworm3.4.6-3fixed
Debiansynfigsid1.5.5+dfsg-3fixed
Debiansynfigforky1.5.5+dfsg-3fixed
Debiansynfigbookworm1.5.1+dfsg-3fixed
Debianlibtoolsid2.6.2-3fixed
Debianlibtoolforky2.6.2-3fixed
Debianlibtooltrixie2.5.4-4fixed
Debianlibtoolbookworm2.4.7-7~deb12u1fixed
Debianopenmpisid6.0.0~rc2-2fixed
Debianopenmpiforky6.0.0~rc2-2fixed
Debianopenmpitrixie5.0.7-1fixed
Debianopenmpibookworm4.1.4-3fixed
Debianpinballsid0.3.20230219-6fixed
Debianpinballforky0.3.20230219-6fixed
Debianpinballtrixie0.3.20230219-3fixed
Debianpinballbookworm0.3.20201218-4fixed
Debianredlandsid1.0.17-10fixed
Debianredlandforky1.0.17-10fixed
Debianredlandtrixie1.0.17-4fixed
Debianredlandbookworm1.0.17-3fixed
Debianxmlsec1sid1.3.10-2fixed
Debianxmlsec1forky1.3.10-2fixed
Debianxmlsec1trixie1.2.41-1fixed
Debianxmlsec1bookworm1.2.37-2fixed
Debiancollectdsid5.12.0-28fixed
Debiancollectdtrixie5.12.0-26fixed
Debiancollectdbookworm5.12.0-14fixed
Debiangraphvizsid14.1.2-1fixed
Debiangraphvizforky14.1.2-1fixed
Debiangraphviztrixie2.42.4-3fixed
Debiangraphvizbookworm2.42.2-7+deb12u1fixed
Debianherculessid3.13-9fixed
Debianherculesforky3.13-9fixed
Debianherculestrixie3.13-8fixed
Debianherculesbookworm3.13-7fixed
Debianheartbeatsid1:3.0.6-20fixed
Debianheartbeatforky1:3.0.6-20fixed
Debianheartbeattrixie1:3.0.6-17fixed
Debianheartbeatbookworm1:3.0.6-13fixed
Debianlibmcryptsid2.5.8-8not affected
Debianlibmcryptforky2.5.8-8not affected
Debianlibmcrypttrixie2.5.8-8not affected
Debianlibmcryptbookworm2.5.8-7not affected
Debianlibpreludebookworm5.2.0-5fixed
Debianimagemagicksid8:7.1.2.34+dfsg1-1fixed
Debianimagemagickforky8:7.1.2.31+dfsg1-1fixed
Debianimagemagicktrixie8:7.1.1.43+dfsg1-1+deb13u12fixed
Debianimagemagicktrixie-security8:7.1.1.43+dfsg1-1+deb13u11fixed
Debianimagemagickbookworm8:6.9.11.60+dfsg-1.6+deb12u11fixed
Debianimagemagickbookworm-security8:6.9.11.60+dfsg-1.6+deb12u14fixed
Debianlibextractorsid1:1.19-2fixed
Debianlibextractorforky1:1.19-2fixed
Debianlibextractortrixie1:1.13-8fixed
Debianlibextractorbookworm1:1.11-7fixed
Debianparser-mysqlsid10.9-2fixed
Debianparser-mysqlforky10.9-2fixed
Debianparser-mysqltrixie10.9-1fixed
Debianparser-mysqlbookworm10.8-3fixed
Debianproftpd-dfsgsid1.3.9e~dfsg-1not affected
Debianproftpd-dfsgforky1.3.9d~dfsg-1not affected
Debianproftpd-dfsgtrixie1.3.8.c+dfsg-4+deb13u3not affected
Debianproftpd-dfsgbookworm1.3.8+dfsg-4+deb12u5not affected
Debianproftpd-dfsgbookworm-security1.3.8+dfsg-4+deb12u4not affected
Debiangraphicsmagicksid1.4+really1.3.49-1fixed
Debiangraphicsmagickforky1.4+really1.3.49-1fixed
Debiangraphicsmagicktrixie1.4+really1.3.45+hg17696-1fixed
Debiangraphicsmagickbookworm1.4+really1.3.40-4+deb12u1fixed
Debiangraphicsmagickbookworm-security1.4+really1.3.40-4+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlamsourcesid7.1.2-1.6lowNot reported[559835]
Debianlamsourceforky7.1.2-1.6lowNot reported[559835]
Debianlamsourcetrixie7.1.2-1.6lowNot reported[559835]
Debianlamsourcebookworm7.1.2-1.6lowNot reported[559835]
Debianjagssourcesid1.0.4-1lowNot reported[559816]
Debianjagssourceforky1.0.4-1lowNot reported[559816]
Debianjagssourcetrixie1.0.4-1lowNot reported[559816]
Debianjagssourcebookworm1.0.4-1lowNot reported[559816]
Debianmp4hsourcesid1.3.1-4.1lowNot reported[559822]
Debianmp4hsourceforky1.3.1-4.1lowNot reported[559822]
Debianmp4hsourcetrixie1.3.1-4.1lowNot reported[559822]
Debianmp4hsourcebookworm1.3.1-4.1lowNot reported[559822]
DebianpdshsourcesidNot affectedunimportantNot reportedNot reported
DebianpdshsourceforkyNot affectedunimportantNot reportedNot reported
DebianpdshsourcetrixieNot affectedunimportantNot reportedNot reported
DebianpdshsourcebookwormNot affectedunimportantNot reportedNot reported
Debiansdccsourcesid2.9.0-5lowNot reported[559840]
Debiansdccsourceforky2.9.0-5lowNot reported[559840]
Debiansdccsourcetrixie2.9.0-5lowNot reported[559840]
Debiansdccsourcebookworm2.9.0-5lowNot reported[559840]
DebianbochssourcesidNot affectedunimportantNot reportedNot reported
DebianbochssourceforkyNot affectedunimportantNot reportedNot reported
DebianbochssourcetrixieNot affectedunimportantNot reportedNot reported
DebianbochssourcebookwormNot affectedunimportantNot reportedNot reported
Debianggobisourcebookworm2.1.9~20091212-1lowNot reported[559806]
Debianhypresourcesid2.4.0b-5lowNot reported[559834]
Debianhypresourceforky2.4.0b-5lowNot reported[559834]
Debianhypresourcetrixie2.4.0b-5lowNot reported[559834]
Debianhypresourcebookworm2.4.0b-5lowNot reported[559834]
Debianclamavsourcesid0.95+dfsg-1lowNot reported[559832]
Debianclamavsourceforky0.95+dfsg-1lowNot reported[559832]
Debianclamavsourcetrixie0.95+dfsg-1lowNot reported[559832]
Debianclamavsourcebookworm0.95+dfsg-1lowNot reported[559832]
Debianhamlibsourcesid1.2.10-1lowNot reported[559814]
Debianhamlibsourceforky1.2.10-1lowNot reported[559814]
Debianhamlibsourcetrixie1.2.10-1lowNot reported[559814]
Debianhamlibsourcebookworm1.2.10-1lowNot reported[559814]
Debianparsersourcesid3.4.0-2unimportantNot reported[559837]
Debianparsersourceforky3.4.0-2unimportantNot reported[559837]
Debianparsersourcetrixie3.4.0-2unimportantNot reported[559837]
Debianparsersourcebookworm3.4.0-2unimportantNot reported[559837]
Debiansynfigsourcesid0.62.00-1lowNot reported[559829]
Debiansynfigsourceforky0.62.00-1lowNot reported[559829]
Debiansynfigsourcebookworm0.62.00-1lowNot reported[559829]
Debianlibtoolsourcesid2.2.6b-1lowNot reported[559797]
Debianlibtoolsourceforky2.2.6b-1lowNot reported[559797]
Debianlibtoolsourcetrixie2.2.6b-1lowNot reported[559797]
Debianlibtoolsourcebookworm2.2.6b-1lowNot reported[559797]
Debianopenmpisourcesid1.3.3-4lowNot reported[559836]
Debianopenmpisourceforky1.3.3-4lowNot reported[559836]
Debianopenmpisourcetrixie1.3.3-4lowNot reported[559836]
Debianopenmpisourcebookworm1.3.3-4lowNot reported[559836]
Debianpinballsourcesid0.3.1-11lowNot reported[559825]
Debianpinballsourceforky0.3.1-11lowNot reported[559825]
Debianpinballsourcetrixie0.3.1-11lowNot reported[559825]
Debianpinballsourcebookworm0.3.1-11lowNot reported[559825]
Debianredlandsourcesid1.0.10-1lowNot reported[559826]
Debianredlandsourceforky1.0.10-1lowNot reported[559826]
Debianredlandsourcetrixie1.0.10-1lowNot reported[559826]
Debianredlandsourcebookworm1.0.10-1lowNot reported[559826]
Debianxmlsec1sourcesid1.2.14-1unimportantNot reported[559831]
Debianxmlsec1sourceforky1.2.14-1unimportantNot reported[559831]
Debianxmlsec1sourcetrixie1.2.14-1unimportantNot reported[559831]
Debianxmlsec1sourcebookworm1.2.14-1unimportantNot reported[559831]
Debiancollectdsourcesid4.8.2-1lowNot reported[559801]
Debiancollectdsourcetrixie4.8.2-1lowNot reported[559801]
Debiancollectdsourcebookworm4.8.2-1lowNot reported[559801]
Debiangraphvizsourcesid2.26.3-14lowNot reported[702436]
Debiangraphvizsourceforky2.26.3-14lowNot reported[702436]
Debiangraphvizsourcetrixie2.26.3-14lowNot reported[702436]
Debiangraphvizsourcebookworm2.26.3-14lowNot reported[702436]
Debianherculessourcesid3.06-1.2lowNot reported[559815]
Debianherculessourceforky3.06-1.2lowNot reported[559815]
Debianherculessourcetrixie3.06-1.2lowNot reported[559815]
Debianherculessourcebookworm3.06-1.2lowNot reported[559815]
Debianheartbeatsourcesid2.1.4-7unimportantNot reported[559845]
Debianheartbeatsourceforky2.1.4-7unimportantNot reported[559845]
Debianheartbeatsourcetrixie2.1.4-7unimportantNot reported[559845]
Debianheartbeatsourcebookworm2.1.4-7unimportantNot reported[559845]
DebianlibmcryptsourcesidNot affectedunimportantNot reportedNot reported
DebianlibmcryptsourceforkyNot affectedunimportantNot reportedNot reported
DebianlibmcryptsourcetrixieNot affectedunimportantNot reportedNot reported
DebianlibmcryptsourcebookwormNot affectedunimportantNot reportedNot reported
Debianlibpreludesourcebookworm0.9.14-2lowNot reported[559844]
Debianimagemagicksourcesid6:6.2.3.1-1lowNot reported[559833]
Debianimagemagicksourceforky6:6.2.3.1-1lowNot reported[559833]
Debianimagemagicksourcetrixie6:6.2.3.1-1lowNot reported[559833]
Debianimagemagicksourcebookworm6:6.2.3.1-1lowNot reported[559833]
Debianlibextractorsourcesid0.5.23+dfsg-4lowNot reported[559819]
Debianlibextractorsourceforky0.5.23+dfsg-4lowNot reported[559819]
Debianlibextractorsourcetrixie0.5.23+dfsg-4lowNot reported[559819]
Debianlibextractorsourcebookworm0.5.23+dfsg-4lowNot reported[559819]
Debianparser-mysqlsourcesid10.3-2unimportantNot reported[559824]
Debianparser-mysqlsourceforky10.3-2unimportantNot reported[559824]
Debianparser-mysqlsourcetrixie10.3-2unimportantNot reported[559824]
Debianparser-mysqlsourcebookworm10.3-2unimportantNot reported[559824]
Debianproftpd-dfsgsourcesidNot affectedunimportantNot reportedNot reported
Debianproftpd-dfsgsourceforkyNot affectedunimportantNot reportedNot reported
Debianproftpd-dfsgsourcetrixieNot affectedunimportantNot reportedNot reported
Debianproftpd-dfsgsourcebookwormNot affectedunimportantNot reportedNot reported
Debiangraphicsmagicksourcesid1.3.5-6lowNot reported[559811]
Debiangraphicsmagicksourceforky1.3.5-6lowNot reported[559811]
Debiangraphicsmagicksourcetrixie1.3.5-6lowNot reported[559811]
Debiangraphicsmagicksourcebookworm1.3.5-6lowNot reported[559811]

[Debian bug #559835][Debian bug #559816][Debian bug #559822][Debian bug #559840][Debian bug #559806][Debian bug #559834][Debian bug #559832][Debian bug #559814][Debian bug #559837][Debian bug #559829][Debian bug #559797][Debian bug #559836][Debian bug #559825][Debian bug #559826][Debian bug #559831][Debian bug #559801][Debian bug #702436][Debian bug #559815][Debian bug #559845][Debian bug #559844][Debian bug #559833][Debian bug #559819][Debian bug #559824][Debian bug #559811]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [bochs]Unknown
    Details (2)
    • 2.7+dfsg-4+deb12u1 · amd64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · arm64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bochsbios]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · all · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · all · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bochs-doc]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · all · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · all · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bochs-sdl]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · amd64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · arm64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bochs-term]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · amd64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · arm64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bochs-wx]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · amd64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · arm64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bochs-x]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · amd64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · arm64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [bximage]Unknown

    Source package: [bochs]

    Details (2)
    • 2.7+dfsg-4+deb12u1 · amd64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

    • 2.7+dfsg-4+deb12u1 · arm64 · bookworm

      Not affected

      dsa · bochs · debian · bookworm

  • [clamav]Unknown
    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-base]Unknown

    Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-daemon]Unknown

    Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-doc]Unknown

    Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-docs]Unknown

    Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-milter]Unknown

    Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamdscan]Unknown

    Source package: [clamav]

    Details (2)
    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.95+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [collectd]Unknown
    Details (2)
    • 5.12.0-14 · amd64 · bookworm

      Fixed · Fixed: 4.8.2-1

      dsa · collectd · debian · bookworm; dsa · collectd · debian · 12

    • 5.12.0-14 · arm64 · bookworm

      Fixed · Fixed: 4.8.2-1

      dsa · collectd · debian · bookworm; dsa · collectd · debian · 12

  • [collectd-core]Unknown

    Source package: [collectd]

    Details (2)
    • 5.12.0-14 · amd64 · bookworm

      Fixed · Fixed: 4.8.2-1

      dsa · collectd · debian · bookworm; dsa · collectd · debian · 12

    • 5.12.0-14 · arm64 · bookworm

      Fixed · Fixed: 4.8.2-1

      dsa · collectd · debian · bookworm; dsa · collectd · debian · 12

  • [collectd-dev]Unknown

    Source package: [collectd]

    Details (2)
    • 5.12.0-14 · all · bookworm

      Fixed · Fixed: 4.8.2-1

      dsa · collectd · debian · bookworm; dsa · collectd · debian · 12

    • 5.12.0-14 · all · bookworm

      Fixed · Fixed: 4.8.2-1

      dsa · collectd · debian · bookworm; dsa · collectd · debian · 12

Next results

Observed:

References