CVE-2016-5746: Medium severity suse libstorage vulnerability
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5746?
CVE-2016-5746 is considered a medium severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2016-5746?
To fix CVE-2016-5746, update to the latest version of libstorage, libstorage-ng, or yast-storage that addresses this vulnerability.
What can be compromised due to CVE-2016-5746?
CVE-2016-5746 can lead to local users obtaining passphrases for encrypted storage devices, compromising sensitive data.
What software is affected by CVE-2016-5746?
CVE-2016-5746 affects openSUSE's libstorage, libstorage-ng, and yast-storage applications.
Is local access required to exploit CVE-2016-5746?
Yes, local access is required to exploit CVE-2016-5746, as it involves reading temporary files on disk.