Vulnerability in Red Hat Enterprise Linux Desktop
CVE-2016-0764
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
Vulnerability class: Race Condition
EPSS: 0.003 (18.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Redhat Enterprise_linux_desktop — versions 7.0
- Redhat Enterprise_linux_hpc_node — versions 7.0
- Redhat Enterprise_linux_server — versions 7.0
- Redhat Enterprise_linux_workstation — versions 7.0
- Redhat Networkmanager
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking)
Frequently asked questions
- What is CVE-2016-0764?
- CVE-2016-0764 is a medium-severity vulnerability in Red Hat Enterprise Linux Desktop, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.2/10. Published 2017-07-17.
- How severe is CVE-2016-0764?
- Medium severity. CVSS v3 base score is 6.2 out of 10.