CVE-2017-11124

Critical

Published: 10/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libxar.so library in version 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.

An attacker may exploit this vulnerability to cause application crashes, potentially leading to service availability loss.

It is recommended to update the xar library to the latest version to mitigate this vulnerability.

Original NVD description (English source)

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.