CVE-2016-0764

Severity: medium (CVSS 6.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-17 · updated 2026-06-17
Weakness: CWE-362

Description

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.

Affected products

[Red Hat] NetworkManager: through 1.0.8

References

http://rhn.redhat.com/errata/RHSA-2016-2581.html
https://bugzilla.redhat.com/show_bug.cgi?id=1324025
http://rhn.redhat.com/errata/RHSA-2016-2581.html
https://bugzilla.redhat.com/show_bug.cgi?id=1324025

Get alerted when CVE-2016-0764 or the next vulnerability affects your stack