This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-0764 →

DEBIAN-CVE-2016-0764

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterp...

Original description

The description as published by the source.

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 network-manager

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.91-1"}]}]

Debian:13 network-manager

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.91-1"}]}]

Debian:14 network-manager

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.91-1"}]}]

References

advisory security-tracker.debian.org