CVE-2026-54417— rxi microtar 数字错误漏洞

Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS

An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next() computes the offset to the next record as round_up(h.size, 512) + sizeof(mtar_raw_header_t) using 32-bit arithmetic. When the header size field is a multiple of 512 in the range 0xFFFFFC01-0xFFFFFE00 (e.g. 0xFFFFFE00), the addition wraps to 0, so mtar_next() seeks to the current record position instead of advancing. As a result, mtar_find() and any loop that iterates entries with mtar_next() repeat indefinitely over the same record, hanging the process at 100% CPU with no recovery.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

整数溢出或超界折返

rxi microtar 数字错误漏洞

rxi microtar是rxi的嵌入式Web服务器。 rxi microtar 0.1.0版本存在安全漏洞，该漏洞源于mtar_next()函数中存在整数溢出，可能导致远程攻击者通过特制tar档案造成拒绝服务（CPU消耗/无限循环）。

N/A

N/A