High severity7.5NVD Advisory· Published May 26, 2016· Updated May 6, 2026

CVE-2016-4021

Description

The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by the \xa3\x03 string.

Affected products

Pgpdump Project/Pgpdump
cpe:2.3:a:pgpdump_project:pgpdump:*:*:*:*:*:*:*:*
Range: <=0.29
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

seclists.org/bugtraq/2016/Apr/99nvdExploit
www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2016-030.txtnvdExploit
lists.fedoraproject.org/pipermail/package-announce/2016-May/183750.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2016-May/184617.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2016-May/184689.htmlnvd
github.com/kazu-yamamoto/pgpdump/pull/16nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000