CVE-2016-0764: Race Condition
A race condition that could disclose connection secrets to authenticated local users when changing ifcfg and keyfile connections was found.
External Reference:
https://mail.gnome.org/archives/networkmanager-list/2016-April/msg00000.html
Other sources
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0764?
CVE-2016-0764 is classified as a medium severity vulnerability.
How do I fix CVE-2016-0764?
To fix CVE-2016-0764, update NetworkManager to version 1.0.12 or later.
Who is affected by CVE-2016-0764?
CVE-2016-0764 affects users of NetworkManager versions less than 1.0.12 and specific Red Hat Enterprise Linux distributions.
What type of vulnerability is CVE-2016-0764?
CVE-2016-0764 is a race condition that can disclose connection secrets to authenticated local users.
Can CVE-2016-0764 be exploited remotely?
No, CVE-2016-0764 requires local access, as it can only be exploited by authenticated local users.