CVE-2016-0764 Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux....
MediumCVSS 6.2
EPSS 0.26%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/network-manager(Debian:12) | < 1.1.91-1 | 1.1.91-1 |
| debian/network-manager(Debian:13) | < 1.1.91-1 | 1.1.91-1 |
| debian/network-manager(Debian:14) | < 1.1.91-1 | 1.1.91-1 |
| redhat networkmanager | <= 1.0.8 | No fix listed |
References
- Debian Security Tracker CVE-2016-0764 vendor-advisory
- RHSA-2016:2581 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking
- bugs.debian.org issue-tracking