CVE-2016-6153 os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application....
MediumCVSS 5.9
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/sqlite3(Debian:12) | < 3.13.0-1 | 3.13.0-1 |
| debian/sqlite3(Debian:13) | < 3.13.0-1 | 3.13.0-1 |
| debian/sqlite3(Debian:14) | < 3.13.0-1 | 3.13.0-1 |
| SQLite | <= 3.12.2 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
References
- Debian Security Tracker CVE-2016-6153 vendor-advisory
- openSUSE-SU-2016:2041 third-party-advisory vendor-advisory
- [oss-security] 20160701 SQLite Tempdir Selection Vulnerability mailing-list patch third-party-advisory
- [oss-security] 20160701 Re: SQLite Tempdir Selection Vulnerability mailing-list third-party-advisory
- 91546 third-party-advisory vdb-entry
- www.sqlite.org vendor-advisory
- [debian-lts-announce] 20230522 [SECURITY] [DLA 3431-1] sqlite security update mailing-list
- FEDORA-2016-0138339b54 vendor-advisory
- FEDORA-2019-49f80a78bc vendor-advisory
- USN-4019-1 vendor-advisory
- USN-4019-2 vendor-advisory
- www.korelogic.com third-party-advisory
- www.sqlite.org release-notes
- www.tenable.com