MidnightBSD

Advisories for xar_project

CVE-2017-11124 HIGH

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-476,

Products Affected

Vendor Product Version
xar_project xar 1.6.1
CVE-2017-11125 HIGH

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-476,

Products Affected

Vendor Product Version
xar_project xar 1.6.1