VYPR

Kde Frameworks

by KDE

CVEs (1)

  • CVE-2016-3100HigJul 13, 2016
    risk 0.55cvss 8.4epss 0.00

    kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.