CVE catalog

CVE-2017-11125

DEBIAN-CVE-2017-11125

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.95% · Oct 25, 2026

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxar131.8.0.498-1fixed
Debianxar141.8.0.498-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxardeb131.8.0.498-1Not reportedDEBIAN-CVE-2017-11125Not reported
Debianxardeb141.8.0.498-1Not reportedDEBIAN-CVE-2017-11125Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [libxar1]Fixed

    Source package: [xar]

    Details (2)

    • 1.8.0.498-2 · amd64 · trixie

      Fixed · Fixed: 1.8.0.498-1

      pypi · xar · debian · 13

    • 1.8.0.498-2 · arm64 · trixie

      Fixed · Fixed: 1.8.0.498-1

      pypi · xar · debian · 13

  • [libxar-dev]Fixed

    Source package: [xar]

    Details (2)

    • 1.8.0.498-2 · amd64 · trixie

      Fixed · Fixed: 1.8.0.498-1

      pypi · xar · debian · 13

    • 1.8.0.498-2 · arm64 · trixie

      Fixed · Fixed: 1.8.0.498-1

      pypi · xar · debian · 13

  • [xar]Fixed
    Details (2)

    • 1.8.0.498-2 · amd64 · trixie

      Fixed · Fixed: 1.8.0.498-1

      pypi · xar · debian · 13

    • 1.8.0.498-2 · arm64 · trixie

      Fixed · Fixed: 1.8.0.498-1

      pypi · xar · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]