2 matches found
CVE-2017-11124
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.
CVE-2017-11125
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.