Vulnerability Description
An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next computes the offset to the next record as round_up(h.size, 512) + sizeof(mtar_raw_header_t) using 32-bit arithmetic.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/rxi/microtar
- https://github.com/rxi/microtar/blob/master/src/microtar.c#L239
- https://raw.githubusercontent.com/rxi/microtar/master/src/microtar.c
FAQ
What is CVE-2026-54417?
CVE-2026-54417 is a vulnerability with a CVSS score of 7.5 (HIGH). An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted...
How severe is CVE-2026-54417?
CVE-2026-54417 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-54417?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.