Unscored CVE-2016-5434 EUVD-2016-6378GHSA-v32h-74vr-6p8q

libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted …

Published Jan 30, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted signature file.

References

[pacman-dev] 20160606 [PATCH] Fix OOB read and endless loop in signature parser. mailing-list
[oss-security] 20160611 CVE Request for Denial of Service in pacman 5.0.1 mailing-list
[oss-security] 20160614 Re: CVE Request for Denial of Service in pacman 5.0.1 mailing-list
[oss-security] 20200421 Re: Pacman package manager - taking untrusted input mailing-list