CVE-2016-5434 | BDVDB-2026-81015 Detail

Description#

libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted signature file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.archlinux.org/pipermail/pacman-dev/2016-June/021148.html
http://www.openwall.com/lists/oss-security/2016/06/11/4
http://www.openwall.com/lists/oss-security/2016/06/14/6
http://www.openwall.com/lists/oss-security/2020/04/21/9

Exploit#

No public exploit known

History#

Version 12017-01-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.