Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default" tag without subsequent fields), the function fails to perform adequate validation before advancing the pointer. An attacker can exploit this by providing a maliciously crafted archive, causing an application utilizing the libarchive API (such as bsdtar) to crash, resulting in a Denial of Service (DoS).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
7 versions affected across 4 products
CVE-2026-5745 A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. W… https://www.cve.org/CVERecord?id=CVE-2026-5745
Post summary
CVE-2026-5745 is a documented null pointer dereference in libarchive’s ACL parsing logic; the announcement includes the vulnerability details but no PoC, patch, or exploitation evidence.
CVE-2026-5745 NULL Pointer Dereference in libarchive ACL Parsing Logic Causing Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5745
Post summary
The post announces the discovery of a null pointer dereference in libarchive’s ACL parsing that leads to denial of service, without providing proof of concept, exploitation evidence, or patch details.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libarchive | libarchive | - | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 6.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |
| App | redhat | hardened_images | - | - | - |
| App | redhat | openshift_container_platform | 4.0 | - | - |