CVE-2020-27743
No fix known EPSS 2%
libtac in pam_tacplus through 1.5.1 lacks a check for a failure of RAND_bytes()/RAND_pseudo_bytes(). This could lead to use of a non-random/predictable session_id.
Products: pam_tacplus_project pam_tacplus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | libpam-tacplus | no fix |
| Ubuntu 18.04 LTS | libpam-tacplus | no fix |
| Ubuntu 20.04 LTS | libpam-tacplus | no fix |
| Ubuntu 22.04 LTS | libpam-tacplus | no fix |