critical9.8
CVE-2016-20014
In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.
Impact
In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pam Tacplus Project | Pam Tacplus | before 1.4.1 |