Xar Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xar Project records in CISA KEV

No Xar Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Xar · all components

TI-2017-08185 CVE-2017-11125 · GHSA-hp8r-5243-x9f3

MEDIUM 46

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01951 Published 2017-07-10 No fix listed CWE-476

TI-2017-08184 CVE-2017-11124 · GHSA-6jc8-h4qw-9892

MEDIUM 46

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01951 Published 2017-07-10 No fix listed CWE-476