CVE-2016-6153: fedoraproject fedora Improper Input Validation
Vulnerability summary
CVE-2016-6153 is a medium (CVSS 5.9) Improper Input Validation vulnerability in fedoraproject fedora. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 41.2% of scored vulnerabilities.
Not severe (CVSS 5.9, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 4Timeline
- 26-09-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.9MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- OSV · DebianEcosystem advisory · calculated5.9MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS trend
Probability
0.48%
Chance of exploitation in the next 30 days
Percentile
41%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.48% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse8 products
- sqlite3&distro=SUSE Linux Enterprise Desktop 12 SP1< 3.8.10.2-3.1
- sqlite3&distro=SUSE Linux Enterprise Server 11 SP4< 3.7.6.3-1.4.6.1
- sqlite3&distro=SUSE Linux Enterprise Server 12 SP1< 3.8.10.2-3.1
- sqlite3&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.7.6.3-1.4.6.1
- sqlite3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 3.8.10.2-3.1
Debian1 product
- sqlite3< 3.13.0-1 | < 3.7.13-1+deb7u3
Fedoraproject1 product
- fedoraEOL24
Mageia1 product
- sqlite3< 3.8.10.2-1.2.mga5
Opensuse1 product
- leapEOL42.1
Sqlite1 product
- sqlite≤ 3.12.2
Ubuntu1 product
- sqlite3< 3.8.2-1ubuntu2.2+esm1 | < 3.11.0-1ubuntu1.2
7 vendors · 14 products
References
25 links- www.sqlite.org/cgi/src/info/67985761aa93fb61Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- usn.ubuntu.com/4019-1/Vendor Advisory
Show all 25 references
- usn.ubuntu.com/4019-2/Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- bugzilla.suse.com/987394REPORT