CVE-2016-20014
First published: Thu Apr 21 2022(Updated: )
In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pam Tacplus Project Pam Tacplus | <1.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2016-20014.
What is the severity of CVE-2016-20014?
CVE-2016-20014 has a severity rating of critical (9.8).
What is the affected software for CVE-2016-20014?
The affected software for CVE-2016-20014 is Pam Tacplus (version up to and excluding 1.4.1).
What is the description of CVE-2016-20014?
CVE-2016-20014 is a vulnerability in pam_tacplus before 1.4.1, where pam_sm_acct_mgmt does not zero out the arep data structure.
How do I fix CVE-2016-20014?
To fix CVE-2016-20014, update Pam Tacplus to version 1.4.1 or later.
- collector/nvd-index
- agent/tags
- agent/type
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/pam tacplus project
- canonical/pam tacplus project pam tacplus