CVE-2016-5746 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-5746 Interim 1 31 2024-07-27T01:03:05Z current 2021-05-30T13:44:10Z 2024-07-27T01:03:05Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-5746 libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-August/002241.html E-Mail link for SUSE-SU-2016:2189-1 https://lists.suse.com/pipermail/sle-security-updates/2016-September/002284.html E-Mail link for SUSE-SU-2016:2353-1 https://lists.suse.com/pipermail/sle-security-updates/2016-September/002285.html E-Mail link for SUSE-SU-2016:2355-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 libstorage libstorage-devel-2.25.35.1-3.1 libstorage-ng libstorage-ng-devel libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 libstorage-ruby libstorage-ruby-2.25.16.1-3.1 libstorage-ruby-2.25.35.1-3.1 libstorage5-2.25.16.1-3.1 libstorage6-2.25.35.1-3.1 libstorage7 yast2-storage yast2-storage-2.17.147.1-9.1 yast2-storage-2.17.161-5.1 yast2-storage-2.17.99.5-5.1 yast2-storage-devel yast2-storage-devel-2.17.161-5.1 yast2-storage-lib-2.17.147.1-9.1 yast2-storage-lib-2.17.161-5.1 yast2-storage-lib-2.17.99.5-5.1 libstorage-ruby-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libstorage6-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 yast2-storage-2.17.99.5-5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA yast2-storage-lib-2.17.99.5-5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA yast2-storage-2.17.147.1-9.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA yast2-storage-lib-2.17.147.1-9.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA yast2-storage-2.17.161-5.1 as a component of SUSE Linux Enterprise Server 11 SP4 yast2-storage-lib-2.17.161-5.1 as a component of SUSE Linux Enterprise Server 11 SP4 libstorage-ruby-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Server 12 SP1 libstorage6-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Server 12 SP1 libstorage-ruby-2.25.16.1-3.1 as a component of SUSE Linux Enterprise Server 12-LTSS libstorage5-2.25.16.1-3.1 as a component of SUSE Linux Enterprise Server 12-LTSS yast2-storage-2.17.161-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 yast2-storage-lib-2.17.161-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libstorage-ruby-2.25.16.1-3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libstorage5-2.25.16.1-3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libstorage-ruby-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libstorage6-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 yast2-storage-devel-2.17.161-5.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libstorage-devel-2.25.35.1-3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 yast2-storage as a component of SUSE Linux Enterprise Desktop 12 yast2-storage as a component of SUSE Linux Enterprise Desktop 12 SP1 libstorage-ng-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libstorage-ng-lang as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libstorage-ng-ruby as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libstorage-ng1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libstorage-ng as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS yast2-storage as a component of SUSE Linux Enterprise Server 11 SP4 LTSS yast2-storage as a component of SUSE Linux Enterprise Server 12 yast2-storage as a component of SUSE Linux Enterprise Server 12 SP1 libstorage-ruby as a component of SUSE Linux Enterprise Server 12 SP2-BCL libstorage7 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libstorage as a component of SUSE Linux Enterprise Server 12 SP2-BCL libstorage-ng as a component of SUSE Linux Enterprise Server 15 libstorage-ng as a component of SUSE Linux Enterprise Server 15-ESPOS libstorage-ng-devel as a component of SUSE Linux Enterprise Server 15-LTSS libstorage-ng-lang as a component of SUSE Linux Enterprise Server 15-LTSS libstorage-ng-ruby as a component of SUSE Linux Enterprise Server 15-LTSS libstorage-ng1 as a component of SUSE Linux Enterprise Server 15-LTSS libstorage-ng as a component of SUSE Linux Enterprise Server 15-LTSS libstorage-ng-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libstorage-ng-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 libstorage-ng-ruby as a component of SUSE Linux Enterprise Server for SAP Applications 15 libstorage-ng1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libstorage-ng as a component of SUSE Linux Enterprise Server for SAP Applications 15 yast2-storage-devel as a component of SUSE Linux Enterprise Software Development Kit 12 yast2-storage as a component of SUSE Linux Enterprise Software Development Kit 12 yast2-storage-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 yast2-storage as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf. CVE-2016-5746 SUSE Linux Enterprise Desktop 12 SP1:libstorage-ruby-2.25.35.1-3.1 SUSE Linux Enterprise Desktop 12 SP1:libstorage6-2.25.35.1-3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:yast2-storage-2.17.99.5-5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:yast2-storage-lib-2.17.99.5-5.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:yast2-storage-2.17.147.1-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:yast2-storage-lib-2.17.147.1-9.1 SUSE Linux Enterprise Server 11 SP4:yast2-storage-2.17.161-5.1 SUSE Linux Enterprise Server 11 SP4:yast2-storage-lib-2.17.161-5.1 SUSE Linux Enterprise Server 12 SP1:libstorage-ruby-2.25.35.1-3.1 SUSE Linux Enterprise Server 12 SP1:libstorage6-2.25.35.1-3.1 SUSE Linux Enterprise Server 12-LTSS:libstorage-ruby-2.25.16.1-3.1 SUSE Linux Enterprise Server 12-LTSS:libstorage5-2.25.16.1-3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:yast2-storage-2.17.161-5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:yast2-storage-lib-2.17.161-5.1 SUSE Linux Enterprise Server for SAP Applications 12:libstorage-ruby-2.25.16.1-3.1 SUSE Linux Enterprise Server for SAP Applications 12:libstorage5-2.25.16.1-3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libstorage-ruby-2.25.35.1-3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libstorage6-2.25.35.1-3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:yast2-storage-devel-2.17.161-5.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libstorage-devel-2.25.35.1-3.1 SUSE Linux Enterprise Desktop 12 SP1:yast2-storage SUSE Linux Enterprise Desktop 12:yast2-storage SUSE Linux Enterprise High Performance Computing 15-LTSS:libstorage-ng SUSE Linux Enterprise High Performance Computing 15-LTSS:libstorage-ng-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libstorage-ng-lang SUSE Linux Enterprise High Performance Computing 15-LTSS:libstorage-ng-ruby SUSE Linux Enterprise High Performance Computing 15-LTSS:libstorage-ng1 SUSE Linux Enterprise Server 12 SP1:yast2-storage SUSE Linux Enterprise Server 12 SP2-BCL:libstorage SUSE Linux Enterprise Server 12 SP2-BCL:libstorage-ruby SUSE Linux Enterprise Server 12 SP2-BCL:libstorage7 SUSE Linux Enterprise Server 12:yast2-storage SUSE Linux Enterprise Server 15-ESPOS:libstorage-ng SUSE Linux Enterprise Server 15-LTSS:libstorage-ng SUSE Linux Enterprise Server 15-LTSS:libstorage-ng-devel SUSE Linux Enterprise Server 15-LTSS:libstorage-ng-lang SUSE Linux Enterprise Server 15-LTSS:libstorage-ng-ruby SUSE Linux Enterprise Server 15-LTSS:libstorage-ng1 SUSE Linux Enterprise Server 15:libstorage-ng SUSE Linux Enterprise Server for SAP Applications 15:libstorage-ng SUSE Linux Enterprise Server for SAP Applications 15:libstorage-ng-devel SUSE Linux Enterprise Server for SAP Applications 15:libstorage-ng-lang SUSE Linux Enterprise Server for SAP Applications 15:libstorage-ng-ruby SUSE Linux Enterprise Server for SAP Applications 15:libstorage-ng1 SUSE Linux Enterprise Software Development Kit 12 SP1:yast2-storage SUSE Linux Enterprise Software Development Kit 12 SP1:yast2-storage-devel SUSE Linux Enterprise Software Development Kit 12:yast2-storage SUSE Linux Enterprise Software Development Kit 12:yast2-storage-devel moderate 4.7 AV:L/AC:H/Au:N/C:C/I:P/A:N 5.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N