Candidate: CVE-2016-0764
PublicDate: 2017-07-17 13:18:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0764
 https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=1.0.12
Description:
 Race condition in Network Manager before 1.0.12 as packaged in Red Hat
 Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat
 Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7
 allows local users to obtain sensitive connection information by reading
 temporary files during ifcfg and keyfile changes.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [6.2 MEDIUM]
 nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [6.2 MEDIUM]

Patches_network-manager:
 upstream: https://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=60b7ed3bdc3941a3b7c56824fba4b7291e79041f
upstream_network-manager: released (1.1.91-1)
precise_network-manager: ignored (reached end-of-life)
precise/esm_network-manager: DNE (precise was needs-triage)
trusty_network-manager: ignored (reached end-of-life)
trusty/esm_network-manager: DNE (trusty was needed)
vivid/stable-phone-overlay_network-manager: ignored (reached end-of-life)
vivid/ubuntu-core_network-manager: DNE
wily_network-manager: ignored (reached end-of-life)
xenial_network-manager: not-affected (1.2.6-0ubuntu0.16.04.2)
esm-infra/xenial_network-manager: not-affected (1.2.6-0ubuntu0.16.04.2)
yakkety_network-manager: ignored (reached end-of-life)
zesty_network-manager: ignored (reached end-of-life)
artful_network-manager: not-affected (1.8.4-1ubuntu3)
bionic_network-manager: not-affected (1.10.4-1ubuntu3)
cosmic_network-manager: not-affected (1.10.4-1ubuntu3)
disco_network-manager: not-affected (1.10.4-1ubuntu3)
devel_network-manager: not-affected (1.10.4-1ubuntu3)