CVE-2013-0191 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via a crafted password.