- Vulnerability/
- USN-4521-1
USN-4521-1: pam_tacplus vulnerability
First published: Mon Sep 21 2020(Updated: )
It was discovered that pam_tacplus did not properly manage shared secrets if DEBUG loglevel and journald are used. A remote attacker could use this issue to expose sensitive information.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libpam-tacplus | <1.3.8-2+deb8u1build0.20.04.1 | 1.3.8-2+deb8u1build0.20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/libpam-tacplus | <1.3.8-2+deb8u1build0.18.04.1 | 1.3.8-2+deb8u1build0.18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/libpam-tacplus | <1.3.8-2+deb8u1build0.16.04.1 | 1.3.8-2+deb8u1build0.16.04.1 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-13881
- https://launchpad.net/ubuntu/+source/libpam-tacplus/1.3.8-2+deb8u1build0.20.04.1
- https://launchpad.net/ubuntu/+source/libpam-tacplus/1.3.8-2+deb8u1build0.18.04.1
- https://launchpad.net/ubuntu/+source/libpam-tacplus/1.3.8-2+deb8u1build0.16.04.1
- https://ubuntu.com/security/notices/USN-4521-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is USN-4521-1.
What is the title of the vulnerability?
The title of the vulnerability is 'USN-4521-1: pam_tacplus vulnerability'.
What is the description of the vulnerability?
The vulnerability is related to pam_tacplus not properly managing shared secrets if DEBUG loglevel and journald are used, which can allow a remote attacker to expose sensitive information.
Which software versions are affected?
The following versions of libpam-tacplus are affected: 1.3.8-2+deb8u1build0.20.04.1 (Ubuntu 20.04), 1.3.8-2+deb8u1build0.18.04.1 (Ubuntu 18.04), and 1.3.8-2+deb8u1build0.16.04.1 (Ubuntu 16.04).
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to install the appropriate updates for libpam-tacplus. Please refer to the references for more information on the updates.
- agent/title
- agent/references
- agent/severity
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04