A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gtk3Upgrade gtk3-immodule-ximUpgrade gtk3-develUpgrade gtk-update-icon-cacheUpgrade gtk3-devel-docs | Sep 26, 2024 | Jul 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade gtk2-debuginfoUpgrade gtk3-immodule-ximUpgrade gtk-update-icon-cacheUpgrade gtk3-debuginfoUpgrade gtk2-immodulesUpgrade gtk2-devel-docsUpgrade gtk3-testsUpgrade gtk2-develUpgrade gtk2-immodule-ximUpgrade gtk3-immodulesUpgrade gtk2Upgrade gtk3Upgrade gtk3-devel-docsUpgrade gtk3-devel | Aug 14, 2024 | Jul 16, 2024 |
| Amazon_linux_2023 | — | Upgrade gtk3-testsUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-devel-docsUpgrade gtk3-tests-debuginfoUpgrade gtk3-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gtk-update-icon-cacheUpgrade gtk3-immodule-ximUpgrade gtk3-immodulesUpgrade gtk3 | Feb 17, 2025 | Jun 15, 2024 |
| Debian | — | Upgrade gtk+3.0Upgrade gtk+2.0 | Sep 2, 2024 | Jul 16, 2024 |
| Gentoo Linux | — | Upgrade x11-libs/gtk+. | Jun 13, 2025 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gtk3-develUpgrade gtk3-helpUpgrade gtk3 | Oct 8, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gtk3-helpUpgrade gtk3-develUpgrade gtk3 | Oct 9, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gtk3-helpUpgrade gtk3-develUpgrade gtk3 | Nov 5, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gtk3-helpUpgrade gtk3Upgrade gtk3-devel | Oct 8, 2024 | Jul 16, 2024 |
| Oracle_linux | — | Upgrade gtk3-devel-docsUpgrade gtk3Upgrade gtk-update-icon-cacheUpgrade gtk3-develUpgrade gtk3-immodule-xim | Oct 16, 2024 | Jun 15, 2024 |
| Redhat_linux | — | Upgrade gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gtk3-immodules-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3Upgrade gtk-update-icon-cacheUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-devel-docsUpgrade gtk3-debuginfoUpgrade gtk3-tests-debuginfoNo solution existsUpgrade gtk3-immodule-xim | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade gtk3-devel-debuginfoUpgrade gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade gtk3-immodule-ximUpgrade gtk3Upgrade gtk3-develUpgrade gtk3-debuginfoUpgrade gtk3-devel-docsUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-xim-debuginfo | Oct 2, 2024 | Jul 16, 2024 |
| Suse | — | Upgrade gtk3-schemaUpgrade gnome-themes-accessibilityUpgrade gtk2-theming-engine-adwaita-32bitUpgrade gtk2-immodule-ximUpgrade gtk2-develUpgrade gtk2-immodule-tigrigna-32bitUpgrade gtk3-immodule-vietnameseUpgrade gettext-its-gtk3Upgrade metatheme-adwaita-commonUpgrade gtk3-immodule-inuktitut-32bitUpgrade gtk2-immodule-tigrignaUpgrade gtk3-devel-docUpgrade gtk2-devel-32bitUpgrade gtk2-dataUpgrade gtk3-immodule-thai-32bitUpgrade typelib-1_0-Gtk-2_0Upgrade gtk2-immodule-amharic-32bitUpgrade gtk2-immodule-amharicUpgrade gtk2-branding-upstreamUpgrade gtk3-immodule-multipress-32bitUpgrade gtk3-immodule-wayland-32bitUpgrade gtk3-develUpgrade gtk3-immodule-vietnamese-32bitUpgrade gtk3-immodule-tigrigna-32bitUpgrade gtk3-immodule-xim-32bitUpgrade gtk2-tools-32bitUpgrade gtk3-immodule-broadwayUpgrade gtk2-immodule-inuktitutUpgrade libgtk-2_0-0Upgrade gtk3-toolsUpgrade typelib-1_0-Gtk-3_0Upgrade gtk3-immodule-ximUpgrade gtk3-dataUpgrade libgtk-2_0-0-32bitUpgrade gtk3-immodule-inuktitutUpgrade gtk2-immodule-vietnamese-32bitUpgrade gtk2-immodule-thaiUpgrade gtk2-toolsUpgrade gtk3-immodule-amharicUpgrade gtk2-immodule-multipressUpgrade gtk2-langUpgrade gtk2-immodule-xim-32bitUpgrade gtk3-langUpgrade gtk2-immodule-inuktitut-32bitUpgrade libgtk-3-0-32bitUpgrade gtk3-tools-32bitUpgrade gtk2-metatheme-adwaitaUpgrade gtk2-immodule-multipress-32bitUpgrade gtk2-immodule-thai-32bitUpgrade gtk2-immodule-vietnameseUpgrade gnome-themes-accessibility-gtk2Upgrade gtk3-devel-32bitUpgrade gtk3-branding-upstreamUpgrade gtk3-immodule-amharic-32bitUpgrade gtk2-theming-engine-adwaitaUpgrade gtk3-immodule-waylandUpgrade gtk3-metatheme-adwaitaUpgrade gtk3-immodule-thaiUpgrade gtk3-immodule-tigrignaUpgrade libgtk-3-0Upgrade gtk3-branding-SLEUpgrade gtk3-immodule-multipress | Jul 31, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade libgtk2.0-0Upgrade libgtk2.0-0t64Upgrade libgtk-3-0Upgrade libgail-3-0t64 | Jul 17, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub