CVE-2016-3100

Severity: high (CVSS 8.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-13 · updated 2026-06-17
Weakness: CWE-200

Description

kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.

Affected products

Kde Frameworks: through 5.22.0
openSUSE Leap: 42.1
Opensuse: 13.2

References

http://lists.opensuse.org/opensuse-updates/2016-07/msg00001.html
http://www.kde.com/announcements/kde-frameworks-5.23.0.php
http://www.securityfocus.com/bid/91769
https://bugs.kde.org/show_bug.cgi?id=358593
https://bugs.kde.org/show_bug.cgi?id=363140
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=72f3702dbe6cf15c06dc13da2c99c864e9022a58
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03bcaceef6e9221e8d8cd
https://www.kde.org/info/security/advisory-20160621-1.txt
http://lists.opensuse.org/opensuse-updates/2016-07/msg00001.html
http://www.kde.com/announcements/kde-frameworks-5.23.0.php
http://www.securityfocus.com/bid/91769
https://bugs.kde.org/show_bug.cgi?id=358593

Get alerted when CVE-2016-3100 or the next vulnerability affects your stack