CVE-2016-5434

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted signature file.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125 CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2016/06/11/4Exploit, Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/14/6Exploit, Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/21/9
https://lists.archlinux.org/pipermail/pacman-dev/2016-June/021148.htmlExploit, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/11/4Exploit, Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/14/6Exploit, Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/21/9
https://lists.archlinux.org/pipermail/pacman-dev/2016-June/021148.htmlExploit, Patch, Third Party Advisory

Timeline

Published: Jan 30, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-54355.9Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001 CVE-2016-54364.9Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Serv CVE-2016-54374.9Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Serv CVE-2016-54394.9Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via CVE-2016-54404.9Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x b CVE-2016-54414.9Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Serv CVE-2016-54424.9Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Serv CVE-2016-54434.7Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availability via vectors related to Server: Connec CVE-2016-54443.7Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x b CVE-2016-54458.3Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect con CVE-2016-54467.3Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect con CVE-2016-54477.6Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to