CVE-2016-20014
No fix known EPSS 1%
In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.
Products: pam_tacplus_project pam_tacplus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | libpam-tacplus | no fix |
| Ubuntu 18.04 LTS | libpam-tacplus | no fix |
| Ubuntu 20.04 LTS | libpam-tacplus | no fix |
| Ubuntu 22.04 LTS | libpam-tacplus | no fix |