{"id":"UBUNTU-CVE-2016-0764","details":"Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.","modified":"2025-07-16T07:33:47.436876Z","published":"2017-07-17T13:18:00Z","withdrawn":"2025-07-18T16:43:22Z","upstream":["CVE-2016-0764"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2016-0764"},{"type":"REPORT","url":"https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=1.0.12"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2016-0764"}],"affected":[{"package":{"name":"network-manager","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/network-manager@1.2.6-0ubuntu0.16.04.2?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-0ubuntu0.16.04.2"}]}],"versions":["1.0.4-0ubuntu5","1.0.4-0ubuntu6","1.0.4-0ubuntu7","1.0.4-0ubuntu8","1.0.4-0ubuntu9","1.0.4-0ubuntu10","1.1.93-0ubuntu2","1.1.93-0ubuntu3","1.1.93-0ubuntu4","1.2.0-0ubuntu0.16.04.2","1.2.0-0ubuntu0.16.04.3","1.2.2-0ubuntu0.16.04.1","1.2.2-0ubuntu0.16.04.3","1.2.2-0ubuntu0.16.04.4","1.2.6-0ubuntu0.16.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"1.2.6-0ubuntu0.16.04.2","binary_name":"gir1.2-networkmanager-1.0"},{"binary_name":"libnm-dev","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-glib-dev","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-glib-vpn-dev","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-glib-vpn1","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_version":"1.2.6-0ubuntu0.16.04.2","binary_name":"libnm-glib-vpn1-dbgsym"},{"binary_name":"libnm-glib4","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-glib4-dbgsym","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-util-dev","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-util2","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm-util2-dbgsym","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm0","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"libnm0-dbgsym","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"network-manager","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"network-manager-dbgsym","binary_version":"1.2.6-0ubuntu0.16.04.2"},{"binary_name":"network-manager-dev","binary_version":"1.2.6-0ubuntu0.16.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-0764.json"}},{"package":{"name":"network-manager","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/network-manager@1.10.4-1ubuntu3?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1ubuntu3"}]}],"versions":["1.8.4-1ubuntu3","1.8.4-1ubuntu4","1.10.4-1ubuntu2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"gir1.2-networkmanager-1.0","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"gir1.2-nm-1.0","binary_version":"1.10.4-1ubuntu3"},{"binary_version":"1.10.4-1ubuntu3","binary_name":"libnm-dev"},{"binary_name":"libnm-glib-dev","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"libnm-glib-vpn-dev","binary_version":"1.10.4-1ubuntu3"},{"binary_version":"1.10.4-1ubuntu3","binary_name":"libnm-glib-vpn1"},{"binary_name":"libnm-glib-vpn1-dbgsym","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"libnm-glib4","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"libnm-glib4-dbgsym","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"libnm-util-dev","binary_version":"1.10.4-1ubuntu3"},{"binary_version":"1.10.4-1ubuntu3","binary_name":"libnm-util2"},{"binary_name":"libnm-util2-dbgsym","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"libnm0","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"libnm0-dbgsym","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"network-manager","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"network-manager-config-connectivity-debian","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"network-manager-config-connectivity-ubuntu","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"network-manager-dbgsym","binary_version":"1.10.4-1ubuntu3"},{"binary_name":"network-manager-dev","binary_version":"1.10.4-1ubuntu3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-0764.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"low"}]}