Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-6153

Опубликовано: 26 сент. 2016
Источник: nvd
CVSS3: 5.9
CVSS2: 4.6
EPSS Низкий

Описание

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*
Версия до 3.12.2 (включая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

EPSS

Процентиль: 9%
0.00032
Низкий

5.9 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 9 лет назад

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

CVSS3: 2.2
redhat
больше 9 лет назад

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

CVSS3: 5.9
debian
больше 9 лет назад

os_unix.c in SQLite before 3.13.0 improperly implements the temporary ...

suse-cvrf
больше 9 лет назад

Security update for sqlite3

suse-cvrf
больше 9 лет назад

Security update for sqlite3

EPSS

Процентиль: 9%
0.00032
Низкий

5.9 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20