ZeroHour

CVE-2016-6153

CVSS 3.0
5.9 medium
EPSS
<1%p40
Published
()
Modified
Description

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

Vendors
sqlitefedoraprojectopensuse
Products
sqlite, fedora, leap
Weakness
CWE-20
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

In the news

No ingested article mentions this CVE yet.