CVE-2016-1602 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-1602 Interim 1 26 2022-11-26T02:17:26Z current 2021-05-30T13:38:02Z 2022-11-26T02:17:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-1602 A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 and 12-SP1 could be used by local attackers to execute code as the user running supportconfig (usually root). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-June/002096.html E-Mail link for SUSE-SU-2016:1507-1 https://lists.suse.com/pipermail/sle-security-updates/2016-June/002102.html E-Mail link for SUSE-SU-2016:1514-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE CaaS Platform 4.0 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 supportutils supportutils-1.20-121.1 supportutils-3.0-82.1 supportutils-3.0-85.1 supportutils-3.0-94.1 supportutils-3.0-95.18.1 supportutils-3.0.3-95.27.1 supportutils-3.0-82.1 as a component of Image SLES12-SP4-Azure-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-GCE-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-OCI-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-Azure supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-EC2-HVM supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-GCE supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-EC2-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-EC2-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-GCE-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-GCE-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand supportutils-3.0-82.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS supportutils-3.0-82.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production supportutils-3.0-82.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production supportutils-3.0-82.1 as a component of SUSE Linux Enterprise Desktop 12 supportutils-3.0-82.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 supportutils-3.0-85.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 supportutils-3.0-94.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 supportutils-3.0-95.18.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 supportutils-3.0.3-95.27.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 supportutils-1.20-121.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA supportutils-1.20-121.1 as a component of SUSE Linux Enterprise Server 11 SP4 supportutils-3.0-82.1 as a component of SUSE Linux Enterprise Server 12 supportutils-3.0-82.1 as a component of SUSE Linux Enterprise Server 12 SP1 supportutils-3.0-85.1 as a component of SUSE Linux Enterprise Server 12 SP2 supportutils-3.0-94.1 as a component of SUSE Linux Enterprise Server 12 SP3 supportutils-3.0-95.18.1 as a component of SUSE Linux Enterprise Server 12 SP4 supportutils-3.0.3-95.27.1 as a component of SUSE Linux Enterprise Server 12 SP5 supportutils-3.0-85.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 supportutils-1.20-121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 supportutils-3.0-82.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 supportutils-3.0-82.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 supportutils as a component of SUSE CaaS Platform 4.0 supportutils as a component of SUSE CaaS Platform 4.5 supportutils as a component of SUSE Enterprise Storage 6 supportutils as a component of SUSE Enterprise Storage 7 supportutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS supportutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS supportutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS supportutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS supportutils as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS supportutils as a component of SUSE Linux Enterprise Micro 5.0 supportutils as a component of SUSE Linux Enterprise Micro 5.1 supportutils as a component of SUSE Linux Enterprise Micro 5.2 supportutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 supportutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 supportutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 supportutils as a component of SUSE Linux Enterprise Real Time 15 SP2 supportutils as a component of SUSE Linux Enterprise Server 15 SP1-LTSS supportutils as a component of SUSE Linux Enterprise Server 15 SP2-LTSS supportutils as a component of SUSE Linux Enterprise Server 15-ESPOS supportutils as a component of SUSE Linux Enterprise Server 15-LTSS supportutils as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 supportutils as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 supportutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 supportutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 supportutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 supportutils as a component of SUSE Manager Proxy 4.0 supportutils as a component of SUSE Manager Proxy 4.1 supportutils as a component of SUSE Manager Retail Branch Server 4.0 supportutils as a component of SUSE Manager Retail Branch Server 4.1 supportutils as a component of SUSE Manager Server 4.0 supportutils as a component of SUSE Manager Server 4.1 A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 and 12-SP1 could be used by local attackers to execute code as the user running supportconfig (usually root). CVE-2016-1602 Image SLES12-SP4-Azure-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-EC2-HVM-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-GCE-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-OCI-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-SAP-Azure:supportutils-3.0-82.1 Image SLES12-SP4-SAP-Azure-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:supportutils-3.0-82.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:supportutils-3.0-82.1 Image SLES12-SP4-SAP-EC2-HVM:supportutils-3.0-82.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-SAP-GCE:supportutils-3.0-82.1 Image SLES12-SP4-SAP-GCE-BYOS:supportutils-3.0-82.1 Image SLES12-SP4-SAP-OCI-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-Azure-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-Azure-Basic-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-Azure-HPC-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-Azure-HPC-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-Azure-SAP-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-Azure-SAP-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-Azure-Standard-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-EC2-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-EC2-ECS-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-EC2-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-EC2-SAP-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-EC2-SAP-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-GCE-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-GCE-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-GCE-SAP-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-GCE-SAP-On-Demand:supportutils-3.0-82.1 Image SLES12-SP5-OCI-BYOS-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:supportutils-3.0-82.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:supportutils-3.0-82.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:supportutils-3.0-82.1 SUSE Linux Enterprise Desktop 12:supportutils-3.0-82.1 SUSE Linux Enterprise Desktop 12 SP1:supportutils-3.0-82.1 SUSE Linux Enterprise Desktop 12 SP2:supportutils-3.0-85.1 SUSE Linux Enterprise Desktop 12 SP3:supportutils-3.0-94.1 SUSE Linux Enterprise Desktop 12 SP4:supportutils-3.0-95.18.1 SUSE Linux Enterprise High Performance Computing 12 SP5:supportutils-3.0.3-95.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:supportutils-1.20-121.1 SUSE Linux Enterprise Server 11 SP4:supportutils-1.20-121.1 SUSE Linux Enterprise Server 12:supportutils-3.0-82.1 SUSE Linux Enterprise Server 12 SP1:supportutils-3.0-82.1 SUSE Linux Enterprise Server 12 SP2:supportutils-3.0-85.1 SUSE Linux Enterprise Server 12 SP3:supportutils-3.0-94.1 SUSE Linux Enterprise Server 12 SP4:supportutils-3.0-95.18.1 SUSE Linux Enterprise Server 12 SP5:supportutils-3.0.3-95.27.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:supportutils-3.0-85.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:supportutils-1.20-121.1 SUSE Linux Enterprise Server for SAP Applications 12:supportutils-3.0-82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:supportutils-3.0-82.1 SUSE CaaS Platform 4.0:supportutils SUSE CaaS Platform 4.5:supportutils SUSE Enterprise Storage 6:supportutils SUSE Enterprise Storage 7:supportutils SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:supportutils SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:supportutils SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:supportutils SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:supportutils SUSE Linux Enterprise High Performance Computing 15-LTSS:supportutils SUSE Linux Enterprise Micro 5.0:supportutils SUSE Linux Enterprise Micro 5.1:supportutils SUSE Linux Enterprise Micro 5.2:supportutils SUSE Linux Enterprise Module for Basesystem 15 SP2:supportutils SUSE Linux Enterprise Module for Basesystem 15 SP3:supportutils SUSE Linux Enterprise Module for Basesystem 15 SP4:supportutils SUSE Linux Enterprise Real Time 15 SP2:supportutils SUSE Linux Enterprise Server 15 SP1-LTSS:supportutils SUSE Linux Enterprise Server 15 SP2-LTSS:supportutils SUSE Linux Enterprise Server 15-ESPOS:supportutils SUSE Linux Enterprise Server 15-LTSS:supportutils SUSE Linux Enterprise Server Business Critical Linux 15 SP1:supportutils SUSE Linux Enterprise Server Business Critical Linux 15 SP2:supportutils SUSE Linux Enterprise Server for SAP Applications 15 SP1:supportutils SUSE Linux Enterprise Server for SAP Applications 15 SP2:supportutils SUSE Linux Enterprise Server for SAP Applications 15:supportutils SUSE Manager Proxy 4.0:supportutils SUSE Manager Proxy 4.1:supportutils SUSE Manager Retail Branch Server 4.0:supportutils SUSE Manager Retail Branch Server 4.1:supportutils SUSE Manager Server 4.0:supportutils SUSE Manager Server 4.1:supportutils moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H