High severity8.4NVD Advisory· Published Jul 13, 2016· Updated May 6, 2026

CVE-2016-3100

Description

kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.opensuse.org/opensuse-updates/2016-07/msg00001.htmlnvd
www.kde.com/announcements/kde-frameworks-5.23.0.phpnvd
www.securityfocus.com/bid/91769nvd
bugs.kde.org/show_bug.cginvd
bugs.kde.org/show_bug.cginvd
quickgit.kde.orgnvd
quickgit.kde.orgnvd
www.kde.org/info/security/advisory-20160621-1.txtnvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000