CVE-2016-3100 Information disclosure in n/a
Local attackers can read X11 cookies from world-readable temporary files to capture keystrokes and potentially escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-3100?
CVE-2016-3100 is a high-severity vulnerability in Opensuse Leap, published on 13 Jul 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
Weakness: CWE-200
Which versions are affected by CVE-2016-3100?
It affects 3 products.
Linux distribution packages (1)
kinit SUSE:Package Hub 12 SP1 | All versions | 5.20.0-6.1 |
Products include Kde Kde Frameworks, Opensuse Leap, Opensuse Opensuse.
How do I fix CVE-2016-3100?
Upgrade to a fixed version.
Is CVE-2016-3100 being exploited?
There is no known exploitation of CVE-2016-3100 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2016-3100, GHSA-8h23-v9w8-5prq, SUSE-SU-2016:2217-1, UBUNTU-CVE-2016-3100, openSUSE-SU-2024:10527-1.