Medium severity · published Jan 30, 2017
CVE-2016-5434
libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted signature file
5.5
CVSS
1.5%
EPSS
No
On KEV
Description
libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted signature file.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Pacman · Pacman Project
5.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5434
Exploit
http://www.openwall.com/lists/oss-security/2016/06/11/4
Exploit
http://www.openwall.com/lists/oss-security/2016/06/14/6
www.openwall.com
http://www.openwall.com/lists/oss-security/2020/04/21/9
Exploit
https://lists.archlinux.org/pipermail/pacman-dev/2016-June/021148.html
More from Pacman
9.8
CVE-2019-18183
pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function
9.8
CVE-2019-18182
pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function
8.8
CVE-2019-9686
pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a…