CVE-2016-0764 in Network Manager

Summary

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/16/2015
• Disclosure: 07/17/2017
• Moderation: VulDB entry created
• Entries: VDB-103558 (1)
• CPE: ready
• CWE: CWE-362 (Confirmed)
• CVSS: 5.1
• EPSS: 0.00035
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0764
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0764
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0764/