Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:libstorage:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductLibstorage (e80590f5-3cd9-5a90-8cfd-0198dd9025d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/opensuse/libstorage purl2cpe 2026-06-01 10:15:36.024264
pkg:github/opensuse/libstorage-ng purl2cpe 2026-06-01 10:15:36.024267
pkg:rpm/opensuse/libstorage-ng purl2cpe 2026-06-01 10:15:36.024270

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5746 vulnerable 2026-06-08 05:07:57.678876 Details available
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.
Published: 2016-09-26T15:00:00.000Z
Updated: 2024-08-06T01:07:59.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.