CVE-2016-4021: The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a d...

Security readout for executives and security teams

CVE-2016-4021 is a denial-of-service flaw in pgpdump before 0.30. A specially crafted input can make the parser loop indefinitely, consuming CPU. This is most relevant where pgpdump processes untrusted PGP data automatically. Exposure is likely limited to systems running pgpdump before 0.30, especially automated workflows that parse externally supplied PGP/OpenPGP material. The source bundle does not provide CPEs or a complete affected-platform inventory. Treat this as a targeted availability risk, not a broad compromise indicator. Prioritize remediation where pgpdump runs in automated mail, security, or file-analysis workflows that could be stalled by crafted input. Mitigation focus: Upgrade pgpdump to version 0.30 or later.; Apply vendor package updates where pgpdump is managed by a distribution.; Avoid automated parsing of untrusted PGP data until vulnerable versions are removed..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.