CVE-2024-6655

2024-07-1100:00:00

ubuntu.com

library injection

cwd

cve-2024-6655

bugs

unix

gtk

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

16.0%

JSON

A flaw was found in the GTK library. Under certain conditions, it is
possible for a library to be injected into a GTK application from the
current working directory.

Bugs

<https://gitlab.gnome.org/GNOME/gtk/-/issues/6786>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchgtk+2.0< anyUNKNOWN
ubuntu20.04noarchgtk+2.0< 2.24.32-4ubuntu4.1UNKNOWN
ubuntu22.04noarchgtk+2.0< 2.24.33-2ubuntu2.1UNKNOWN
ubuntu24.04noarchgtk+2.0< 2.24.33-4ubuntu1.1UNKNOWN
ubuntu16.04noarchgtk+2.0< anyUNKNOWN
ubuntu18.04noarchgtk+3.0< anyUNKNOWN
ubuntu20.04noarchgtk+3.0< 3.24.20-0ubuntu1.2UNKNOWN
ubuntu22.04noarchgtk+3.0< 3.24.33-1ubuntu2.2UNKNOWN
ubuntu24.04noarchgtk+3.0< 3.24.41-4ubuntu1.1UNKNOWN
ubuntu16.04noarchgtk+3.0< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	gtk+2.0	< any	UNKNOWN
ubuntu	20.04	noarch	gtk+2.0	< 2.24.32-4ubuntu4.1	UNKNOWN
ubuntu	22.04	noarch	gtk+2.0	< 2.24.33-2ubuntu2.1	UNKNOWN
ubuntu	24.04	noarch	gtk+2.0	< 2.24.33-4ubuntu1.1	UNKNOWN
ubuntu	16.04	noarch	gtk+2.0	< any	UNKNOWN
ubuntu	18.04	noarch	gtk+3.0	< any	UNKNOWN
ubuntu	20.04	noarch	gtk+3.0	< 3.24.20-0ubuntu1.2	UNKNOWN
ubuntu	22.04	noarch	gtk+3.0	< 3.24.33-1ubuntu2.2	UNKNOWN
ubuntu	24.04	noarch	gtk+3.0	< 3.24.41-4ubuntu1.1	UNKNOWN
ubuntu	16.04	noarch	gtk+3.0	< any	UNKNOWN