CVE-2018-1000879

A vulnerability was found in libarchive, where a NULL pointer dereference in the archive_acl_from_text_l function in libarchive/archive_acl.c can lead to a denial of service, a remote attacker could exploit this flaw by persuading a victim to open a specially crafted file, causing the application to crash.

This vulnerability is rated as low severity because it results in a denial of service due to a NULL pointer dereference, it can crash the application, it does not affect system security or integrity.

This issue did not affect the versions of libarchive as shipped with Red Hat Enterprise Linux 6 and 7.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.