CVE-2016-20014

CVE-2016-20014 affects pam_tacplus (pam_tacplus.c) before version 1.4.1, where pam_sm_acct_mgmt does not zero out the arep data structure. Root cause: the arep data structure is not cleared, which is the basis for the vulnerability. The provided connected documents do not specify affected vendor ...