CVE-2016-4036: Opensuse Leap

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

Affected products

• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only

Published 2016-04-18. Last modified 2026-06-17.