CVE-2016-3100: Kde Frameworks

High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days.

kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.

Affected products

• Kde Kde Frameworks: up to and including 5.22.0
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only

Published 2016-07-13. Last modified 2026-06-17.