CVE-2024-6655
Gtk3: gtk2: library injection from cwd
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Gtk3: gtk2: library injection from cwd
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
CVE-2024-6655- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
EUVDEUVD-2024-47997
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
EUVD-2024-47997- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-v9xm-vjq4-6r8q
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be...
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
GHSA-v9xm-vjq4-6r8q- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
NVD
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
CVE-2024-6655- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSVBELL-CVE-2024-6655
- Record
BELL-CVE-2024-6655- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
DEBIAN-CVE-2024-6655- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 31 moreShow less
OSVOESA-2024-1886
gtk2 security update
GTK+ is a library for creating graphical user interfaces. The library is created in C programming language. The GTK+ is also called the GIMP Toolkit. Originally, the library was created while developing the GIMP image manipulation program.
Security Fix(es):
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.(CVE-2024-6655)
- Record
OESA-2024-1886- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1892
gtk3 security update
GTK+ is an object-oriented widget toolkit written in the programming language C; it has a C-based object-oriented architecture that allows for maximum flexibility. The GTK+ library contains a set of graphical control elements (widgets)for creating graphical user interfaces. This package contains version 3 of GTK+.
Security Fix(es):
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.(CVE-2024-6655)
- Record
OESA-2024-1892- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:6963
Red Hat Security Advisory: gtk3 security update
- Record
RHSA-2024:6963- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9184
Red Hat Security Advisory: gtk3 security update
- Record
RHSA-2024:9184- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2024:9184
Moderate: gtk3 security update
The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.
Security Fix(es):
- gtk3: gtk2: Library injection from CWD (CVE-2024-6655)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.
- Record
RLSA-2024:9184- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
UBUNTU-CVE-2024-6655- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:6963 No score
Moderate: gtk3 security update
The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.
Security Fix(es):
- gtk3: gtk2: Library injection from CWD (CVE-2024-6655)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:6963- Updated
- 2026-11-02
OSVALSA-2024:9184 No score
Moderate: gtk3 security update
The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.
Security Fix(es):
- gtk3: gtk2: Library injection from CWD (CVE-2024-6655)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:9184- Updated
- 2026-11-02
OSVAZL-43377 No score
CVE-2024-6655 affecting package gtk3 for versions less than 3.24.28-10
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
AZL-43377- Updated
- 2026-11-05
OSVAZL-43381 No score
CVE-2024-6655 affecting package gtk2 for versions less than 2.24.32-12
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
AZL-43381- Updated
- 2026-11-05
OSVAZL-43384 No score
CVE-2024-6655 affecting package gtk2 for versions less than 2.24.32-12
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
AZL-43384- Updated
- 2026-11-02
OSVAZL-43387 No score
CVE-2024-6655 affecting package gtk3 for versions less than 3.24.28-10
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
AZL-43387- Updated
- 2026-11-02
OSVCLSA-2024-1728056039 No score
gtk3: Fix of CVE-2024-6655
- CVE-2024-6655: fix loading library from unstrusted search path
- Record
CLSA-2024-1728056039- Updated
- 2026-11-02
OSVCLSA-2025-1745946091 No score
gtk3: Fix of CVE-2024-6655
- CVE-2024-6655: prevent injection of libraries from current working directory
- Record
CLSA-2025-1745946091- Updated
- 2026-11-02
OSVCLSA-2026-1792691154 No score
gtk3: Fix of CVE-2024-6655
- Pin _changelog_trimtime to a fixed date: the rolling "1 year ago" cut-off dropped every record and shipped RPMs with an empty changelog
- Record
CLSA-2026-1792691154- Updated
- 2026-11-02
OSV No score
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
- Record
CVE-2024-6655- Updated
- 2026-11-02
OSVMGASA-2024-0312 No score
Updated gtk+2.0 and gtk+3.0 packages fix security vulnerability
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory. (CVE-2024-6655)
- Record
MGASA-2024-0312- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14124-1 No score
gettext-its-gtk3-3.24.43-1.1 on GA media
These are all security issues fixed in the gettext-its-gtk3-3.24.43-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14124-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14191-1 No score
gtk2-branding-upstream-2.24.33-10.1 on GA media
These are all security issues fixed in the gtk2-branding-upstream-2.24.33-10.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14191-1- Updated
- 2026-11-02
OSVRLSA-2024:6963 No score
Moderate: gtk3 security update
The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.
Security Fix(es):
- gtk3: gtk2: Library injection from CWD (CVE-2024-6655)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:6963- Updated
- 2026-11-02
OSVSUSE-SU-2024:2611-1 No score
Security update for gtk2
This update for gtk2 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
- Record
SUSE-SU-2024:2611-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2612-1 No score
Security update for gtk3
This update for gtk3 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
- Record
SUSE-SU-2024:2612-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2633-1 No score
Security update for gtk3
This update for gtk3 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
- Record
SUSE-SU-2024:2633-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2634-1 No score
Security update for gtk2
This update for gtk2 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
- Record
SUSE-SU-2024:2634-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2660-1 No score
Security update for gtk2
This update for gtk2 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
- Record
SUSE-SU-2024:2660-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2661-1 No score
Security update for gtk3
This update for gtk3 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
- Record
SUSE-SU-2024:2661-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2897-1 No score
Security update for gtk2
This update for gtk2 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
- Record
SUSE-SU-2024:2897-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2898-1 No score
Security update for gtk3
This update for gtk3 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
- Record
SUSE-SU-2024:2898-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:0031-1 No score
Security update for gtk3
This update for gtk3 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
Other fixes:
- Updated to version 3.24.43
- Record
SUSE-SU-2025:0031-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20052-1 No score
Security update for gtk3
This update for gtk3 fixes the following issues:
- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
- Record
SUSE-SU-2025:20052-1- Updated
- 2026-11-02
OSVUSN-6899-1 No score
gtk+2.0, gtk+3.0 vulnerability
It was discovered that GTK would attempt to load modules from the current directory, contrary to expectations. If users started GTK applications from shared directories, a local attacker could use this issue to execute arbitrary code, and possibly escalate privileges.
- Record
USN-6899-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gtk-update-icon-cacheAlmaLinux:8 |
before 3.22.30-12.el8_10 | 3.22.30-12.el8_10 |
gtk3AlmaLinux:8 |
before 3.22.30-12.el8_10 | 3.22.30-12.el8_10 |
gtk3-develAlmaLinux:8 |
before 3.22.30-12.el8_10 | 3.22.30-12.el8_10 |
gtk3-devel-docsAlmaLinux:8 |
before 3.22.30-12.el8_10 | 3.22.30-12.el8_10 |
gtk3-immodule-ximAlmaLinux:8 |
before 3.22.30-12.el8_10 | 3.22.30-12.el8_10 |
gtk-update-icon-cacheAlmaLinux:9 |
before 3.24.31-5.el9 | 3.24.31-5.el9 |
gtk3AlmaLinux:9 |
before 3.24.31-5.el9 | 3.24.31-5.el9 |
gtk3-develAlmaLinux:9 |
before 3.24.31-5.el9 | 3.24.31-5.el9 |
gtk3-devel-docsAlmaLinux:9 |
before 3.24.31-5.el9 | 3.24.31-5.el9 |
gtk3-immodule-ximAlmaLinux:9 |
before 3.24.31-5.el9 | 3.24.31-5.el9 |
Show 174 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gtk3Azure Linux:3 |
before 3.24.28-10 | 3.24.28-10 |
gtk2Azure Linux:3 |
before 2.24.32-12 | 2.24.32-12 |
gtk2Azure Linux:2 |
before 2.24.32-12 | 2.24.32-12 |
gtk3Azure Linux:2 |
before 3.24.28-10 | 3.24.28-10 |
gtk+2.0Alpaquita:23 |
2.24.33-r7 up to 2.24.33-r8 | 2.24.33-r8 |
gtk+3.0Alpaquita:23 |
3.24.34-r7 up to 3.24.43-r0 | 3.24.43-r0 |
gtk+2.0Alpaquita:stream |
2.24.33-r7 up to 2.24.33-r12 | 2.24.33-r12 |
gtk+3.0Alpaquita:stream |
3.24.37-r0 up to 3.24.43-r0 | 3.24.43-r0 |
gtk-update-icon-cacheTuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk3TuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk3-develTuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk3-devel-docsTuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk3-immodule-ximTuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk3-immodulesTuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk3-testsTuxCare:CentOS:7 |
before 3.22.30-8.el7_9.tuxcare.els1 | 3.22.30-8.el7_9.tuxcare.els1 |
gtk-update-icon-cacheTuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk3TuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk3-develTuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk3-devel-docsTuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk3-immodule-ximTuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk3-immodulesTuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk3-testsTuxCare:AlmaLinux:9.2 |
before 3.24.31-2.el9.tuxcare.els1 | 3.24.31-2.el9.tuxcare.els1 |
gtk-update-icon-cacheTuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk3TuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk3-develTuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk3-devel-docsTuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk3-immodule-ximTuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk3-immodulesTuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk3-testsTuxCare:RHEL:7 |
before 3.22.30-8.el7_9.tuxcare.els2 | 3.22.30-8.el7_9.tuxcare.els2 |
gtk+2.0Debian:12 |
before 2.24.33-2+deb12u1, plus listed versions 2.24.33-2 |
2.24.33-2+deb12u1 |
gtk+2.0Debian:13 |
before 2.24.33-5 | 2.24.33-5 |
gtk+2.0Debian:14 |
before 2.24.33-5 | 2.24.33-5 |
gtk+3.0Debian:12 |
before 3.24.38-2~deb12u2, plus listed versions 3.24.37-23.24.38-13.24.38-2~deb12u1 |
3.24.38-2~deb12u2 |
gtk+3.0Debian:13 |
before 3.24.43-1 | 3.24.43-1 |
gtk+3.0Debian:14 |
before 3.24.43-1 | 3.24.43-1 |
gtk+2.0Mageia:9 |
before gtk+2.0-2.24.33-5.1.mga9 | gtk+2.0-2.24.33-5.1.mga9 |
gtk+3.0Mageia:9 |
before gtk+3.0-3.24.38-1.1.mga9 | gtk+3.0-3.24.38-1.1.mga9 |
gtk2openEuler:20.03-LTS-SP4 |
before 2.24.32-11.oe2003sp4 | 2.24.32-11.oe2003sp4 |
gtk2openEuler:22.03-LTS-SP1 |
before 2.24.33-9.oe2203sp1 | 2.24.33-9.oe2203sp1 |
gtk2openEuler:24.03-LTS |
before 2.24.33-10.oe2403 | 2.24.33-10.oe2403 |
gtk2openEuler:22.03-LTS-SP4 |
before 2.24.33-9.oe2203sp4 | 2.24.33-9.oe2203sp4 |
gtk2openEuler:22.03-LTS-SP3 |
before 2.24.33-9.oe2203sp3 | 2.24.33-9.oe2203sp3 |
gtk3openEuler:20.03-LTS-SP4 |
before 3.24.21-6.oe2003sp4 | 3.24.21-6.oe2003sp4 |
gtk3openEuler:22.03-LTS-SP1 |
before 3.24.30-11.oe2203sp1 | 3.24.30-11.oe2203sp1 |
gtk3openEuler:24.03-LTS |
before 3.24.41-2.oe2403 | 3.24.41-2.oe2403 |
gtk3openEuler:22.03-LTS-SP4 |
before 3.24.30-11.oe2203sp4 | 3.24.30-11.oe2203sp4 |
gtk3openEuler:22.03-LTS-SP3 |
before 3.24.30-11.oe2203sp3 | 3.24.30-11.oe2203sp3 |
gtk-update-icon-cacheRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk-update-icon-cache-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3Red Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-develRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-immodule-ximRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-immodule-xim-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-immodules-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-tests-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk-update-icon-cache-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-devel-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-devel-docsRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-immodule-xim-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-immodules-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3-tests-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk-update-icon-cacheRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk-update-icon-cache-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3Red Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-develRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-immodule-ximRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-immodule-xim-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-immodules-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-tests-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk-update-icon-cache-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-debugsourceRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-devel-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-devel-docsRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-immodule-xim-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-immodules-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3-tests-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk3Rocky Linux:8 |
before 0:3.22.30-12.el8_10 | 0:3.22.30-12.el8_10 |
gtk3Rocky Linux:9 |
before 0:3.24.31-5.el9 | 0:3.24.31-5.el9 |
gtk2SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.24.31-9.9.1 | 2.24.31-9.9.1 |
gtk2SUSE:Linux Enterprise Server 12 SP5 |
before 2.24.31-9.9.1 | 2.24.31-9.9.1 |
gtk2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.24.31-9.9.1 | 2.24.31-9.9.1 |
gtk2SUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 2.24.31-9.9.1 | 2.24.31-9.9.1 |
gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.20.10-17.16.1 | 3.20.10-17.16.1 |
gtk3SUSE:Linux Enterprise Server 12 SP5 |
before 3.20.10-17.16.1 | 3.20.10-17.16.1 |
gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.20.10-17.16.1 | 3.20.10-17.16.1 |
gtk3SUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 3.24.38+111-150600.3.3.1 | 3.24.38+111-150600.3.3.1 |
gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 3.24.38+111-150600.3.3.1 | 3.24.38+111-150600.3.3.1 |
gtk3openSUSE:Leap 15.6 |
before 3.24.38+111-150600.3.3.1 | 3.24.38+111-150600.3.3.1 |
gtk2SUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 2.24.33-150600.11.3.1 | 2.24.33-150600.11.3.1 |
gtk2SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 2.24.33-150600.11.3.1 | 2.24.33-150600.11.3.1 |
gtk2openSUSE:Leap 15.6 |
before 2.24.33-150600.11.3.1 | 2.24.33-150600.11.3.1 |
gtk2SUSE:Linux Enterprise Micro 5.3 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise Micro 5.4 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise Micro 5.5 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise Server 15 SP4-LTSS |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Manager Proxy 4.3 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2SUSE:Manager Server 4.3 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2openSUSE:Leap Micro 5.5 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk2openSUSE:Leap 15.5 |
before 2.24.33-150400.4.3.1 | 2.24.33-150400.4.3.1 |
gtk3SUSE:Linux Enterprise Micro 5.3 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise Micro 5.4 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise Micro 5.5 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3-docSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3-docSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3-docSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise Server 15 SP4-LTSS |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3-docSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3-docSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Manager Proxy 4.3 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3SUSE:Manager Server 4.3 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3openSUSE:Leap Micro 5.5 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3openSUSE:Leap 15.5 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk3-docopenSUSE:Leap 15.5 |
before 3.24.34-150400.3.9.1 | 3.24.34-150400.3.9.1 |
gtk2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk2SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk2SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk2SUSE:Linux Enterprise Server 15 SP3-LTSS |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk2SUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk2SUSE:Enterprise Storage 7.1 |
before 2.24.32+67-150200.4.3.1 | 2.24.32+67-150200.4.3.1 |
gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Linux Enterprise Server 15 SP3-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Linux Enterprise Micro 5.2 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3SUSE:Enterprise Storage 7.1 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gtk3-docSUSE:Enterprise Storage 7.1 |
before 3.24.20-150200.3.9.1 | 3.24.20-150200.3.9.1 |
gnome-themes-standardSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 3.22.3-150000.4.5.1 | 3.22.3-150000.4.5.1 |
gtk3SUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 3.24.43-150600.3.7.1 | 3.24.43-150600.3.7.1 |
gtk3-branding-SLESUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 15.0-150600.21.2.1 | 15.0-150600.21.2.1 |
gnome-themes-standardSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 3.22.3-150000.4.5.1 | 3.22.3-150000.4.5.1 |
gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 3.24.43-150600.3.7.1 | 3.24.43-150600.3.7.1 |
gnome-themes-standardopenSUSE:Leap 15.6 |
before 3.22.3-150000.4.5.1 | 3.22.3-150000.4.5.1 |
gtk3openSUSE:Leap 15.6 |
before 3.24.43-150600.3.7.1 | 3.24.43-150600.3.7.1 |
gtk3-branding-SLEopenSUSE:Leap 15.6 |
before 15.0-150600.21.2.1 | 15.0-150600.21.2.1 |
gtk3SUSE:Linux Micro 6.0 |
before 3.24.37+70-6.1 | 3.24.37+70-6.1 |
gtk+2.0Ubuntu:16.04:LTS |
All versions, plus listed versions 2.24.28-1ubuntu12.24.29-1ubuntu12.24.29-1ubuntu22.24.30-1ubuntu12.24.30-1ubuntu1.16.04.12.24.30-1ubuntu1.16.04.2 |
None known |
gtk+3.0Ubuntu:16.04:LTS |
All versions, plus listed versions 3.16.7-0ubuntu33.16.7-0ubuntu43.16.7-0ubuntu53.18.2-1ubuntu23.18.4-1ubuntu1 Show 14 moreShow less3.18.5-1ubuntu13.18.5-1ubuntu23.18.6-1ubuntu13.18.7-1ubuntu13.18.7-1ubuntu23.18.7-1ubuntu33.18.8-0ubuntu13.18.8-1ubuntu13.18.8-1ubuntu23.18.9-1ubuntu13.18.9-1ubuntu33.18.9-1ubuntu3.13.18.9-1ubuntu3.23.18.9-1ubuntu3.3 |
None known |
gtk+2.0Ubuntu:18.04:LTS |
All versions, plus listed versions 2.24.31-2ubuntu12.24.31-4ubuntu12.24.32-1ubuntu1 |
None known |
gtk+3.0Ubuntu:18.04:LTS |
All versions, plus listed versions 3.22.24-0ubuntu13.22.24-0ubuntu23.22.25-0ubuntu13.22.26-1ubuntu23.22.26-2ubuntu1 Show 8 moreShow less3.22.28-1ubuntu13.22.28-1ubuntu33.22.29-2ubuntu13.22.29-3ubuntu13.22.30-1ubuntu13.22.30-1ubuntu23.22.30-1ubuntu33.22.30-1ubuntu4 |
None known |
gtk+2.0Ubuntu:20.04:LTS |
before 2.24.32-4ubuntu4.1, plus listed versions 2.24.32-4ubuntu12.24.32-4ubuntu4 |
2.24.32-4ubuntu4.1 |
gtk+3.0Ubuntu:20.04:LTS |
before 3.24.20-0ubuntu1.2, plus listed versions 3.24.12-1ubuntu13.24.13-1ubuntu13.24.14-1ubuntu13.24.17-3ubuntu13.24.18-1ubuntu13.24.20-0ubuntu13.24.20-0ubuntu1.1 |
3.24.20-0ubuntu1.2 |
gtk+2.0Ubuntu:22.04:LTS |
before 2.24.33-2ubuntu2.1, plus listed versions 2.24.33-2ubuntu12.24.33-2ubuntu2 |
2.24.33-2ubuntu2.1 |
gtk+3.0Ubuntu:22.04:LTS |
before 3.24.33-1ubuntu2.2, plus listed versions 3.24.30-1ubuntu13.24.30-3ubuntu13.24.30-3ubuntu23.24.31-1ubuntu13.24.32-0ubuntu13.24.33-1ubuntu13.24.33-1ubuntu23.24.33-1ubuntu2.1 |
3.24.33-1ubuntu2.2 |
gtk+2.0Ubuntu:24.04:LTS |
before 2.24.33-4ubuntu1.1, plus listed versions 2.24.33-2ubuntu22.24.33-3.1ubuntu32.24.33-3.1ubuntu42.24.33-4ubuntu1 |
2.24.33-4ubuntu1.1 |
gtk+3.0Ubuntu:24.04:LTS |
before 3.24.41-4ubuntu1.1, plus listed versions 3.24.38-5ubuntu13.24.38-5ubuntu23.24.39-1ubuntu13.24.40-2ubuntu13.24.41-1.1ubuntu33.24.41-1.1ubuntu43.24.41-4ubuntu1 |
3.24.41-4ubuntu1.1 |
gtk3openSUSE:Tumbleweed |
before 3.24.43-1.1 | 3.24.43-1.1 |
gtk2openSUSE:Tumbleweed |
before 2.24.33-10.1 | 2.24.33-10.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-6655 is a high vulnerability (CVSS 7.0) in Red Hat Enterprise Linux 10, published July 11, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in gtk-update-icon-cache 3.22.30-12.el8_10.
References
access.redhat.com/errata/RHSA-2024:6963
bugzilla.redhat.com/show_bug.cgi?id=2297098
gitlab.gnome.org/GNOME/gtk/-/merge_requests/7361/diffs?commit_id=3bbf0b6176d42836d23c36a6ac410e807ec0a7a7
openwall.com/lists/oss-security/2024/09/09/1
Show 38 moreShow less
nvd.nist.gov/vuln/detail/CVE-2024-6655
github.com/advisories/GHSA-v9xm-vjq4-6r8q
errata.almalinux.org/8/ALSA-2024-6963.html
docs.bell-sw.com/security/cves/CVE-2024-6655
errata.tuxcare.com/centos7-els/CLSA-2024-1728056039.html
security-tracker.debian.org/tracker/CVE-2024-6655
advisories.mageia.org/MGASA-2024-0312.html
bugs.mageia.org/show_bug.cgi?id=33409
ubuntu.com/security/notices/USN-6899-1
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-1886
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6963.json
cve.org/CVERecord?id=CVE-2024-6655
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
issues.redhat.com/browse/RHEL-22483
errata.rockylinux.org/RLSA-2024:6963
suse.com/support/update/announcement/2024/suse-su-20242611-1
bugzilla.suse.com/1228120