Fedora 30 : xar (2020-bbd24dd0cf)

The remote Fedora 30 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-bbd24dd0cf advisory. - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close...

Fedora: Security Advisory for xar (FEDORA-2020-bbd24dd0cf)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2017-11125

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xargetpath function in util.c...

CVE-2017-11125

CVE-2017-11125 arises from a NULL pointer dereference in the XAR library: libxar.so in xar 1.6.1, in the function xar_get_path (util.c). The NVD entry lists a high base impact (CVSSv2/3: Partial confidentiality, integrity, and availability impact; network attack vector; no user interaction) with ...

CVE-2017-11125

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xargetpath function in util.c...