Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libnl3-cliUpgrade libnl3 | Nov 30, 2017 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade libnm-gtkUpgrade libnl3-docUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-libnm-develUpgrade NetworkManagerUpgrade NetworkManager-libreswan-gnomeUpgrade NetworkManager-glib-develUpgrade network-manager-appletUpgrade NetworkManager-glibUpgrade libnl3-develUpgrade libnmaUpgrade libnm-gtk-develUpgrade NetworkManager-tuiUpgrade nm-connection-editorUpgrade NetworkManager-libreswanUpgrade NetworkManager-dispatcher-routing-rulesUpgrade libnl3-cliUpgrade libnma-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-adslUpgrade libnl3Upgrade NetworkManager-teamUpgrade NetworkManager-wwan | Jul 14, 2017 | Jul 14, 2017 |
| Redhat_linux | — | Upgrade NetworkManager-libreswan-gnomeUpgrade NetworkManager-glib-develUpgrade libnm-gtk-develUpgrade NetworkManager-wwanUpgrade NetworkManager-libreswanUpgrade libnmaUpgrade NetworkManager-glibUpgrade NetworkManager-bluetoothUpgrade libnl3-develUpgrade NetworkManager-adslUpgrade NetworkManager-teamUpgrade NetworkManager-tuiUpgrade NetworkManager-libnmUpgrade NetworkManager-wifiUpgrade NetworkManager-libreswan-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-debuginfoUpgrade libnl3-debuginfoUpgrade libnl3-cliUpgrade network-manager-appletUpgrade NetworkManager-libnm-develUpgrade NetworkManagerUpgrade libnma-develUpgrade libnl3Upgrade libnm-gtkUpgrade libnl3-docNo solution existsUpgrade nm-connection-editorUpgrade NetworkManager-config-serverUpgrade network-manager-applet-debuginfo | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade NetworkManagerUpgrade libnm-util2Upgrade typelib-1_0-NMClient-1_0Upgrade libnm-glib4Upgrade typelib-1_0-NetworkManager-1_0Upgrade NetworkManager-langUpgrade NetworkManager-develUpgrade libnm-glib-vpn1Upgrade typelib-1_0-NM-1_0Upgrade libnm0 | Dec 9, 2016 | Nov 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub