CVE-2017-11124

CVE-2017-11124 concerns the XAR project: libxar.so in xar 1.6.1 contains a NULL pointer dereference in the xar_unserialize function (archive.c). The connected records corroborate the CVE across NVD entries and Fedora advisories, noting the issue alongside related CVEs in xar releases and updates ...

CVE-2017-11125

CVE-2017-11125 arises from a NULL pointer dereference in the XAR library: libxar.so in xar 1.6.1, in the function xar_get_path (util.c). The NVD entry lists a high base impact (CVSSv2/3: Partial confidentiality, integrity, and availability impact; network attack vector; no user interaction) with ...