Bug 1470070 (CVE-2017-11124, CVE-2017-11125) - CVE-2017-11125 CVE-2017-11124 xar: Multiple vulnerabilities
Summary: CVE-2017-11125 CVE-2017-11124 xar: Multiple vulnerabilities
Keywords:
Status: CLOSED RAWHIDE
Alias: CVE-2017-11124, CVE-2017-11125
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Mosaab Alzoubi
QA Contact:
URL:
Whiteboard:
Depends On: 1470073
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-07-12 11:24 UTC by Andrej Nemec
Modified: 2020-01-25 02:48 UTC (History)
3 users (show)

Fixed In Version: xar-1.8.0.417.1-1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-01-25 02:09:31 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2017-07-12 11:24:01 UTC 
It was found that libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c. A local attacker could cause the application to crash.

References:

https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_get_path-util-c/
Comment 1 Andrej Nemec 2017-07-12 11:27:08 UTC 
It was found that libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c. A local attacker could cause the application to crash.

References:

https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_unserialize-archive-c/
Comment 2 Andrej Nemec 2017-07-12 11:28:07 UTC 
Created xar tracking bugs for this issue:

Affects: fedora-all [bug 1470073]
Comment 3 Product Security DevOps Team 2019-06-08 03:16:18 UTC 
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
Comment 4 Product Security DevOps Team 2020-01-25 02:09:31 UTC 
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
Comment 5 Mosaab Alzoubi 2020-01-25 02:48:06 UTC 
Fixed in xar-1.8.0.417.1-1
Note You need to log in before you can comment on or make changes to this bug.