CVE-2016-3100

EPSS 0.05% · P15 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-3100

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

KDE Frameworks 权限许可和访问控制漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

KDE Frameworks是KDE社区的开发的一个KDE应用程序的技术基础库和软件框架的集合。kinit是其中的一个用来获取和缓存Kerberos票据的命令行工具。 KDE Frameworks 5.23.0之前版本中的kinit存在安全漏洞，该漏洞源于/tmp/xauth-xxx-_y目录设置弱权限(644)。本地攻击者可通过读取文件利用该漏洞获取其他用户的X11 cookies，获取特权。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2016-3100

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-3100

请登录查看更多情报信息。

🔗 https://www.kde.org/info/security/advisory-20160621-1.txtx_refsource_CONFIRM
🔗 https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03bcaceef6e9221e8d8cdx_refsource_CONFIRM
🔗 https://bugs.kde.org/show_bug.cgi?id=358593x_refsource_CONFIRM
🔗 https://bugs.kde.org/show_bug.cgi?id=363140x_refsource_CONFIRM
🔗 https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=72f3702dbe6cf15c06dc13da2c99c864e9022a58x_refsource_CONFIRM
🔗 http://www.kde.com/announcements/kde-frameworks-5.23.0.phpx_refsource_CONFIRM
🔗 http://www.securityfocus.com/bid/91769vdb-entryx_refsource_BID
🔗 http://lists.opensuse.org/opensuse-updates/2016-07/msg00001.htmlvendor-advisoryx_refsource_SUSE
https://nvd.nist.gov/vuln/detail/CVE-2016-3100

Same Patch Batch · n/a · 2016-07-13 · 131 CVEs total

CVE-2016-4213		多款Adobe产品内存损坏漏洞
CVE-2016-4229		Adobe Flash Player 释放后重用漏洞
CVE-2016-4228		Adobe Flash Player 释放后重用漏洞
CVE-2016-4227		Adobe Flash Player 释放后重用漏洞
CVE-2016-4226		Adobe Flash Player 释放后重用漏洞
CVE-2016-4225		Adobe Flash Player 任意代码执行漏洞
CVE-2016-4224		Adobe Flash Player 任意代码执行漏洞
CVE-2016-4223		Adobe Flash Player 任意代码执行漏洞
CVE-2016-4222		Adobe Flash Player 释放后重用漏洞
CVE-2016-4221		Adobe Flash Player 内存损坏漏洞
CVE-2016-4220		Adobe Flash Player 内存损坏漏洞
CVE-2016-4219		Adobe Flash Player 内存损坏漏洞
CVE-2016-4218		Adobe Flash Player 内存损坏漏洞
CVE-2016-4217		Adobe Flash Player 内存损坏漏洞
CVE-2016-4216		Adobe XMP Toolkit for Java 信息泄露漏洞
CVE-2016-4215		多款Adobe产品安全绕过漏洞
CVE-2016-4214		多款Adobe产品内存损坏漏洞
CVE-2016-4203		多款Adobe产品内存损坏漏洞
CVE-2016-4202		多款Adobe产品安全漏洞
CVE-2016-4201		多款Adobe产品内存损坏漏洞

Showing top 20 of 131 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2016-3100

No comments yet

Leave a comment