CVE-2016-6153 Information disclosure in n/a
Local attackers can exploit SQLite's temporary file handling to read sensitive data or crash the application via the current working directory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-6153?
CVE-2016-6153 is a medium-severity vulnerability in Fedoraproject Fedora, published on 26 Sep 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.
Weakness: CWE-20
Which versions are affected by CVE-2016-6153?
It affects 3 products.
Linux distribution packages (8)
sqlite3 SUSE:Linux Enterprise Desktop 12 SP1 | All versions | 3.8.10.2-3.1 |
sqlite3 SUSE:Linux Enterprise Server 11 SP4 | All versions | 3.7.6.3-1.4.6.1 |
sqlite3 SUSE:Linux Enterprise Server 12 SP1 | All versions | 3.8.10.2-3.1 |
sqlite3 SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 3.7.6.3-1.4.6.1 |
sqlite3 SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 3.8.10.2-3.1 |
sqlite3 SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 3.7.6.3-1.4.6.1 |
sqlite3 SUSE:Linux Enterprise Software Development Kit 12 SP1 | All versions | 3.8.10.2-3.1 |
sqlite3 SUSE:Studio Onsite 1.3 | All versions | 3.7.6.3-1.4.6.1 |
Products include Fedoraproject Fedora, Opensuse Leap, Sqlite Sqlite.
How do I fix CVE-2016-6153?
Upgrade to a fixed version.
Is CVE-2016-6153 being exploited?
There is no known exploitation of CVE-2016-6153 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as DEBIAN-CVE-2016-6153, DLA-543-1, GHSA-c7vx-xpvf-fj57, MGASA-2016-0255, SUSE-SU-2016:1945-1, SUSE-SU-2016:2021-1 and 1 more.