Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2016-6153 →

DEBIAN-CVE-2016-6153

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive in...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 sqlite3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-1"}]}]

Debian:13 sqlite3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-1"}]}]

Debian:14 sqlite3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-1"}]}]

Références

advisory security-tracker.debian.org