CVE-2016-4477 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-4477 Interim 1 49 2025-11-05T04:27:14Z current 2021-05-30T13:42:04Z 2025-11-05T04:27:14Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-4477 wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP2 LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed wpa_supplicant wpa_supplicant-2.10-150500.1.3 wpa_supplicant-2.10-150600.5.4 wpa_supplicant-2.10-4.18 wpa_supplicant-2.11-150700.1.6 wpa_supplicant-2.11-160000.2.2 wpa_supplicant-2.11-slfo.1.1_1.2 wpa_supplicant-2.6-1.1 wpa_supplicant-2.6-15.10.1 wpa_supplicant-2.6-2.50 wpa_supplicant-2.6-4.11.1 wpa_supplicant-2.6-4.17.1 wpa_supplicant-2.6-lp150.2.13 wpa_supplicant-2.6-lp152.7.3 wpa_supplicant-2.9-150000.4.36.1 wpa_supplicant-2.9-4.23.1 wpa_supplicant-2.9-4.29.1 wpa_supplicant-2.9-4.33.1 wpa_supplicant-gui wpa_supplicant-gui-2.6-1.1 wpa_supplicant-2.6-15.10.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 wpa_supplicant-2.9-4.23.1 as a component of SUSE Linux Enterprise Micro 5.0 wpa_supplicant-2.9-4.29.1 as a component of SUSE Linux Enterprise Micro 5.1 wpa_supplicant-2.9-4.29.1 as a component of SUSE Linux Enterprise Micro 5.2 wpa_supplicant-2.9-150000.4.36.1 as a component of SUSE Linux Enterprise Micro 5.3 wpa_supplicant-2.9-150000.4.36.1 as a component of SUSE Linux Enterprise Micro 5.4 wpa_supplicant-2.10-150500.1.3 as a component of SUSE Linux Enterprise Micro 5.5 wpa_supplicant-2.6-2.50 as a component of SUSE Linux Enterprise Module for Basesystem 15 wpa_supplicant-2.6-4.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 wpa_supplicant-2.6-4.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 wpa_supplicant-2.9-4.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 wpa_supplicant-2.9-4.33.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 wpa_supplicant-2.10-150500.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 wpa_supplicant-2.10-150600.5.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 wpa_supplicant-2.11-150700.1.6 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 wpa_supplicant-2.6-15.10.1 as a component of SUSE Linux Enterprise Server 12 SP5 wpa_supplicant-2.11-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 wpa_supplicant-2.6-15.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 wpa_supplicant-2.10-4.18 as a component of SUSE Linux Micro 6.0 wpa_supplicant-2.11-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 wpa_supplicant-2.6-lp150.2.13 as a component of openSUSE Leap 15.0 wpa_supplicant-2.6-lp152.7.3 as a component of openSUSE Leap 15.2 wpa_supplicant-2.9-4.29.1 as a component of openSUSE Leap 15.3 wpa_supplicant-2.9-4.33.1 as a component of openSUSE Leap 15.4 wpa_supplicant-2.6-1.1 as a component of openSUSE Tumbleweed wpa_supplicant-gui-2.6-1.1 as a component of openSUSE Tumbleweed wpa_supplicant as a component of HPE Helion OpenStack 8 wpa_supplicant as a component of SUSE CaaS Platform 4.5 wpa_supplicant as a component of SUSE Enterprise Storage 7 wpa_supplicant as a component of SUSE Linux Enterprise Desktop 11 SP4 wpa_supplicant-gui as a component of SUSE Linux Enterprise Desktop 11 SP4 wpa_supplicant as a component of SUSE Linux Enterprise Desktop 12 wpa_supplicant as a component of SUSE Linux Enterprise Desktop 12 SP1 wpa_supplicant as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS wpa_supplicant as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS wpa_supplicant as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS wpa_supplicant as a component of SUSE Linux Enterprise Micro 5.0 wpa_supplicant as a component of SUSE Linux Enterprise Micro 5.1 wpa_supplicant as a component of SUSE Linux Enterprise Micro 5.2 wpa_supplicant as a component of SUSE Linux Enterprise Micro 5.3 wpa_supplicant as a component of SUSE Linux Enterprise Micro 5.4 wpa_supplicant as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 wpa_supplicant as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 wpa_supplicant as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 wpa_supplicant as a component of SUSE Linux Enterprise Real Time 15 SP2 wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP1 wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP2 LTSS wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP3 wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP3 LTSS wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata wpa_supplicant as a component of SUSE Linux Enterprise Server 11 SP4-LTSS wpa_supplicant as a component of SUSE Linux Enterprise Server 12 wpa_supplicant as a component of SUSE Linux Enterprise Server 12 SP1 wpa_supplicant as a component of SUSE Linux Enterprise Server 12 SP3-BCL wpa_supplicant as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS wpa_supplicant as a component of SUSE Linux Enterprise Server 12 SP3-LTSS wpa_supplicant as a component of SUSE Linux Enterprise Server 15 SP2-LTSS wpa_supplicant as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 wpa_supplicant as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 wpa_supplicant as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 wpa_supplicant as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 wpa_supplicant as a component of SUSE Manager Proxy 4.1 wpa_supplicant as a component of SUSE Manager Retail Branch Server 4.1 wpa_supplicant as a component of SUSE Manager Server 4.1 wpa_supplicant as a component of SUSE OpenStack Cloud 8 wpa_supplicant as a component of SUSE OpenStack Cloud Crowbar 8 wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command. CVE-2016-4477 SUSE Linux Enterprise High Performance Computing 12 SP5:wpa_supplicant-2.6-15.10.1 SUSE Linux Enterprise Micro 5.0:wpa_supplicant-2.9-4.23.1 SUSE Linux Enterprise Micro 5.1:wpa_supplicant-2.9-4.29.1 SUSE Linux Enterprise Micro 5.2:wpa_supplicant-2.9-4.29.1 SUSE Linux Enterprise Micro 5.3:wpa_supplicant-2.9-150000.4.36.1 SUSE Linux Enterprise Micro 5.4:wpa_supplicant-2.9-150000.4.36.1 SUSE Linux Enterprise Micro 5.5:wpa_supplicant-2.10-150500.1.3 SUSE Linux Enterprise Module for Basesystem 15:wpa_supplicant-2.6-2.50 SUSE Linux Enterprise Module for Basesystem 15 SP1:wpa_supplicant-2.6-4.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:wpa_supplicant-2.6-4.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:wpa_supplicant-2.9-4.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:wpa_supplicant-2.9-4.33.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:wpa_supplicant-2.10-150500.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP6:wpa_supplicant-2.10-150600.5.4 SUSE Linux Enterprise Module for Basesystem 15 SP7:wpa_supplicant-2.11-150700.1.6 SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.6-15.10.1 SUSE Linux Enterprise Server 16.0:wpa_supplicant-2.11-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.6-15.10.1 SUSE Linux Micro 6.0:wpa_supplicant-2.10-4.18 SUSE Linux Micro 6.1:wpa_supplicant-2.11-slfo.1.1_1.2 openSUSE Leap 15.0:wpa_supplicant-2.6-lp150.2.13 openSUSE Leap 15.2:wpa_supplicant-2.6-lp152.7.3 openSUSE Leap 15.3:wpa_supplicant-2.9-4.29.1 openSUSE Leap 15.4:wpa_supplicant-2.9-4.33.1 openSUSE Tumbleweed:wpa_supplicant-2.6-1.1 openSUSE Tumbleweed:wpa_supplicant-gui-2.6-1.1 HPE Helion OpenStack 8:wpa_supplicant SUSE CaaS Platform 4.5:wpa_supplicant SUSE Enterprise Storage 7:wpa_supplicant SUSE Linux Enterprise Desktop 11 SP4:wpa_supplicant SUSE Linux Enterprise Desktop 11 SP4:wpa_supplicant-gui SUSE Linux Enterprise Desktop 12 SP1:wpa_supplicant SUSE Linux Enterprise Desktop 12:wpa_supplicant SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:wpa_supplicant SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:wpa_supplicant SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:wpa_supplicant SUSE Linux Enterprise Micro 5.0:wpa_supplicant SUSE Linux Enterprise Micro 5.1:wpa_supplicant SUSE Linux Enterprise Micro 5.2:wpa_supplicant SUSE Linux Enterprise Micro 5.3:wpa_supplicant SUSE Linux Enterprise Micro 5.4:wpa_supplicant SUSE Linux Enterprise Module for Basesystem 15 SP3:wpa_supplicant SUSE Linux Enterprise Module for Basesystem 15 SP4:wpa_supplicant SUSE Linux Enterprise Module for Basesystem 15 SP5:wpa_supplicant SUSE Linux Enterprise Real Time 15 SP2:wpa_supplicant SUSE Linux Enterprise Server 11 SP1 for Teradata:wpa_supplicant SUSE Linux Enterprise Server 11 SP1:wpa_supplicant SUSE Linux Enterprise Server 11 SP2 LTSS:wpa_supplicant SUSE Linux Enterprise Server 11 SP3 LTSS:wpa_supplicant SUSE Linux Enterprise Server 11 SP3 for Teradata:wpa_supplicant SUSE Linux Enterprise Server 11 SP3:wpa_supplicant SUSE Linux Enterprise Server 11 SP4-LTSS:wpa_supplicant SUSE Linux Enterprise Server 12 SP1:wpa_supplicant SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant SUSE Linux Enterprise Server 12 SP3-ESPOS:wpa_supplicant SUSE Linux Enterprise Server 12 SP3-LTSS:wpa_supplicant SUSE Linux Enterprise Server 12:wpa_supplicant SUSE Linux Enterprise Server 15 SP2-LTSS:wpa_supplicant SUSE Linux Enterprise Server Business Critical Linux 15 SP1:wpa_supplicant SUSE Linux Enterprise Server Business Critical Linux 15 SP2:wpa_supplicant SUSE Linux Enterprise Server for SAP Applications 12 SP3:wpa_supplicant SUSE Linux Enterprise Server for SAP Applications 15 SP2:wpa_supplicant SUSE Manager Proxy 4.1:wpa_supplicant SUSE Manager Retail Branch Server 4.1:wpa_supplicant SUSE Manager Server 4.1:wpa_supplicant SUSE OpenStack Cloud 8:wpa_supplicant SUSE OpenStack Cloud Crowbar 8:wpa_supplicant moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H