6 matches found
CVE-2016-20014
In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...
9.8CVSS0.01252EPSS
SaveExploits0References1
CVE-2016-20014
In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...
9.8CVSS6.8AI score
SaveExploits0References1
Code injection
In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...
7.5CVSS7AI score0.01252EPSS
SaveExploits0References1Affected Software1
CVE-2016-20014
CVE-2016-20014 affects pam_tacplus (pam_tacplus.c) before version 1.4.1, where pam_sm_acct_mgmt does not zero out the arep data structure. Root cause: the arep data structure is not cleared, which is the basis for the vulnerability. The provided connected documents do not specify affected vendor ...
9.8CVSS9.4AI score0.01252EPSS
SaveExploits0References1Affected Software1
20