CVE-2016-9566 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-9566 Interim 1 44 2025-03-06T00:22:49Z current 2021-05-30T13:47:57Z 2025-03-06T00:22:49Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-9566 base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-October/012534.html E-Mail link for SUSE-SU-2022:3576-1 https://lists.suse.com/pipermail/sle-updates/2024-May/035252.html E-Mail link for SUSE-SU-2024:1629-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3Q6N4F4EAYSJ6FNMJTKIZZZLPGW4MV2P/#3Q6N4F4EAYSJ6FNMJTKIZZZLPGW4MV2P E-Mail link for openSUSE-SU-2017:0146-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Manager Client Tools 12 SUSE Manager Client Tools 12-BETA SUSE Package Hub 15 SP1 openSUSE Tumbleweed grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 grafana-sap-providers-1.1-1.7.1 grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 hwdata-0.314-10.14.1 icinga-1.13.3-12.8.1 icinga-devel-1.13.3-12.8.1 icinga-doc-1.13.3-12.8.1 icinga-idoutils-1.13.3-12.8.1 icinga-idoutils-mysql-1.13.3-12.8.1 icinga-idoutils-oracle-1.13.3-12.8.1 icinga-idoutils-pgsql-1.13.3-12.8.1 icinga-plugins-downtimes-1.13.3-12.8.1 icinga-plugins-eventhandlers-1.13.3-12.8.1 icinga-www-1.13.3-12.8.1 icinga-www-config-1.13.3-12.8.1 libzmq3-4.0.4-15.8.1 monitoring-tools-1.13.3-12.8.1 nagios nagios-3.0.6-1.25.36.6.2 nagios-4.4.6-2.5 nagios-4.4.6-bp151.4.6.1 nagios-contrib-4.4.6-2.5 nagios-contrib-4.4.6-bp151.4.6.1 nagios-devel-4.4.6-2.5 nagios-devel-4.4.6-bp151.4.6.1 nagios-theme-exfoliation-4.4.6-2.5 nagios-theme-exfoliation-4.4.6-bp151.4.6.1 nagios-www-3.0.6-1.25.36.6.2 nagios-www-4.4.6-2.5 nagios-www-4.4.6-bp151.4.6.1 nagios-www-dch-4.4.6-2.5 nagios-www-dch-4.4.6-bp151.4.6.1 sysuser-shadow-2.0-1.9.1 sysuser-tools-2.0-1.9.1 zeromq-devel-4.0.4-15.8.1 libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-Azure-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-EC2-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-EC2-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-GCE-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-GCE-On-Demand libzmq3-4.0.4-15.8.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production sysuser-shadow-2.0-1.9.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libzmq3-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Module for Advanced Systems Management 12 sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Module for Containers 12 nagios-3.0.6-1.25.36.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nagios-www-3.0.6-1.25.36.6.2 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA sysuser-tools-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA sysuser-tools-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 sysuser-tools-2.0-1.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 grafana-sap-providers-1.1-1.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 sysuser-shadow-2.0-1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 sysuser-tools-2.0-1.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libzmq3-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 zeromq-devel-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libzmq3-4.0.4-15.8.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12 grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 as a component of SUSE Manager Client Tools 12 grafana-sap-providers-1.1-1.7.1 as a component of SUSE Manager Client Tools 12 grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12 hwdata-0.314-10.14.1 as a component of SUSE Manager Client Tools 12 icinga-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-devel-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-doc-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-mysql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-oracle-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-idoutils-pgsql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-plugins-downtimes-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-plugins-eventhandlers-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-www-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 icinga-www-config-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 libzmq3-4.0.4-15.8.1 as a component of SUSE Manager Client Tools 12 monitoring-tools-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12 sysuser-shadow-2.0-1.9.1 as a component of SUSE Manager Client Tools 12 grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12-BETA grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 as a component of SUSE Manager Client Tools 12-BETA grafana-sap-providers-1.1-1.7.1 as a component of SUSE Manager Client Tools 12-BETA grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 as a component of SUSE Manager Client Tools 12-BETA icinga-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-devel-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-doc-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-mysql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-oracle-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-idoutils-pgsql-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-plugins-downtimes-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-plugins-eventhandlers-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-www-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA icinga-www-config-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA libzmq3-4.0.4-15.8.1 as a component of SUSE Manager Client Tools 12-BETA monitoring-tools-1.13.3-12.8.1 as a component of SUSE Manager Client Tools 12-BETA sysuser-shadow-2.0-1.9.1 as a component of SUSE Manager Client Tools 12-BETA nagios-4.4.6-bp151.4.6.1 as a component of SUSE Package Hub 15 SP1 nagios-contrib-4.4.6-bp151.4.6.1 as a component of SUSE Package Hub 15 SP1 nagios-devel-4.4.6-bp151.4.6.1 as a component of SUSE Package Hub 15 SP1 nagios-theme-exfoliation-4.4.6-bp151.4.6.1 as a component of SUSE Package Hub 15 SP1 nagios-www-4.4.6-bp151.4.6.1 as a component of SUSE Package Hub 15 SP1 nagios-www-dch-4.4.6-bp151.4.6.1 as a component of SUSE Package Hub 15 SP1 nagios-4.4.6-2.5 as a component of openSUSE Tumbleweed nagios-contrib-4.4.6-2.5 as a component of openSUSE Tumbleweed nagios-devel-4.4.6-2.5 as a component of openSUSE Tumbleweed nagios-theme-exfoliation-4.4.6-2.5 as a component of openSUSE Tumbleweed nagios-www-4.4.6-2.5 as a component of openSUSE Tumbleweed nagios-www-dch-4.4.6-2.5 as a component of openSUSE Tumbleweed nagios as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565. CVE-2016-9566 Image SLES12-SP5-Azure-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-Basic-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-Azure-HPC-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-Azure-Standard-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-EC2-ECS-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-EC2-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-GCE-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-GCE-On-Demand:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-GCE-SAP-BYOS:libzmq3-4.0.4-15.8.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:sysuser-shadow-2.0-1.9.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Module for Advanced Systems Management 12:libzmq3-4.0.4-15.8.1 SUSE Linux Enterprise Module for Containers 12:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:nagios-3.0.6-1.25.36.6.2 SUSE Linux Enterprise Server 11 SP3-TERADATA:nagios-www-3.0.6-1.25.36.6.2 SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP5:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server 12 SP5:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:grafana-sap-providers-1.1-1.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-shadow-2.0-1.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysuser-tools-2.0-1.9.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libzmq3-4.0.4-15.8.1 SUSE Linux Enterprise Software Development Kit 12 SP5:zeromq-devel-4.0.4-15.8.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Manager Client Tools 12:grafana-sap-providers-1.1-1.7.1 SUSE Manager Client Tools 12:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12:hwdata-0.314-10.14.1 SUSE Manager Client Tools 12:icinga-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-devel-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-doc-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-mysql-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-oracle-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-idoutils-pgsql-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-plugins-downtimes-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-plugins-eventhandlers-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-www-1.13.3-12.8.1 SUSE Manager Client Tools 12:icinga-www-config-1.13.3-12.8.1 SUSE Manager Client Tools 12:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12:monitoring-tools-1.13.3-12.8.1 SUSE Manager Client Tools 12:sysuser-shadow-2.0-1.9.1 SUSE Manager Client Tools 12-BETA:grafana-ha-cluster-dashboards-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12-BETA:grafana-sap-netweaver-dashboards-1.0.3+git.1601889366.9f71957-1.10.1 SUSE Manager Client Tools 12-BETA:grafana-sap-providers-1.1-1.7.1 SUSE Manager Client Tools 12-BETA:grafana-sleha-provider-1.1.0+git.1605027022.a84d536-1.10.1 SUSE Manager Client Tools 12-BETA:icinga-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-devel-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-doc-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-mysql-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-oracle-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-idoutils-pgsql-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-plugins-downtimes-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-plugins-eventhandlers-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-www-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:icinga-www-config-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:libzmq3-4.0.4-15.8.1 SUSE Manager Client Tools 12-BETA:monitoring-tools-1.13.3-12.8.1 SUSE Manager Client Tools 12-BETA:sysuser-shadow-2.0-1.9.1 SUSE Package Hub 15 SP1:nagios-4.4.6-bp151.4.6.1 SUSE Package Hub 15 SP1:nagios-contrib-4.4.6-bp151.4.6.1 SUSE Package Hub 15 SP1:nagios-devel-4.4.6-bp151.4.6.1 SUSE Package Hub 15 SP1:nagios-theme-exfoliation-4.4.6-bp151.4.6.1 SUSE Package Hub 15 SP1:nagios-www-4.4.6-bp151.4.6.1 SUSE Package Hub 15 SP1:nagios-www-dch-4.4.6-bp151.4.6.1 openSUSE Tumbleweed:nagios-4.4.6-2.5 openSUSE Tumbleweed:nagios-contrib-4.4.6-2.5 openSUSE Tumbleweed:nagios-devel-4.4.6-2.5 openSUSE Tumbleweed:nagios-theme-exfoliation-4.4.6-2.5 openSUSE Tumbleweed:nagios-www-4.4.6-2.5 openSUSE Tumbleweed:nagios-www-dch-4.4.6-2.5 important 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H