CVE-2017-11125

Critical

Published: 10/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libxar.so library in version 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.

An attacker may exploit this vulnerability to cause application crashes, potentially leading to service availability interruptions.

It is recommended to upgrade to a newer version of the xar library to mitigate this vulnerability.

Original NVD description (English source)

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.