CVE-2016-3100
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which...
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
CVE-2016-3100- CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
CVE-2016-3100- Updated
- 2026-11-02
EUVDEUVD-2016-4155 No score
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
EUVD-2016-4155- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8h23-v9w8-5prq
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which...
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
GHSA-8h23-v9w8-5prq- CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
CVE-2016-3100- CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-3100
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
DEBIAN-CVE-2016-3100- CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-3100
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
- Record
UBUNTU-CVE-2016-3100- CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10527-1 No score
kinit-32bit-5.29.0-1.1 on GA media
These are all security issues fixed in the kinit-32bit-5.29.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10527-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2217-1 No score
Security update for kinit
kinit was updated to fix one security issue.
This security issue was fixed:
- CVE-2016-3100: World readable Xauthority file exposed cookie credentials (boo#983926).
- Record
SUSE-SU-2016:2217-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kinitDebian:12 |
before 5.23.0-1 | 5.23.0-1 |
kinitDebian:13 |
before 5.23.0-1 | 5.23.0-1 |
kinitDebian:14 |
before 5.23.0-1 | 5.23.0-1 |
kinitSUSE:Package Hub 12 SP1 |
before 5.20.0-6.1 | 5.20.0-6.1 |
kinitUbuntu:16.04:LTS |
before 5.18.0-0ubuntu1.1, plus listed versions 5.15.0-0ubuntu15.15.0-0ubuntu25.18.0-0ubuntu1 |
5.18.0-0ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-3100 is a high vulnerability (CVSS 8.4) in Kde Frameworks, published June 27, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in kinit 5.23.0-1.
References
quickgit.kde.org?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03bcaceef6e9221e8d8cd
securityfocus.com/bid/91769
lists.opensuse.org/opensuse-updates/2016-07/msg00001.html
bugs.kde.org/show_bug.cgi?id=358593
kde.com/announcements/kde-frameworks-5.23.0.php
Show 12 moreShow less
kde.org/info/security/advisory-20160621-1.txt
nvd.nist.gov/vuln/detail/CVE-2016-3100
github.com/advisories/GHSA-8h23-v9w8-5prq
security-tracker.debian.org/tracker/CVE-2016-3100
suse.com/support/update/announcement/2016/suse-su-20162217-1
bugzilla.suse.com/983926
ubuntu.com/security/CVE-2016-3100
cgit.kde.org/kinit.git/commit?id=dece8fd89979cd1a86c03bcaceef6e9221e8d8cd
cve.org/CVERecord?id=CVE-2016-3100