A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bsdtarUpgrade libarchiveUpgrade libarchive-devel | Aug 22, 2025 | Aug 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libarchive-debuginfoUpgrade bsdtarUpgrade bsdcpioUpgrade libarchive-develUpgrade libarchive | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bsdcpio-debuginfoUpgrade bsdtar-debuginfoUpgrade bsdcat-debuginfoUpgrade bsdunzip-debuginfoUpgrade libarchiveUpgrade bsdcpioUpgrade libarchive-develUpgrade libarchive-debuginfoUpgrade libarchive-debugsourceUpgrade bsdunzipUpgrade bsdtarUpgrade bsdcat | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade libarchive | Jun 11, 2025 | Jun 9, 2025 |
| Freebsd | — | Upgrade FreeBSD | Aug 8, 2025 | Aug 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libarchive | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libarchive | Sep 25, 2025 | Aug 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 2, 2025 |
| Oracle_linux | — | Upgrade libarchiveUpgrade libarchive-develUpgrade bsdtarUpgrade bsdcpio | Aug 21, 2025 | May 20, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 20, 2025 |
| Redhat_linux | — | Upgrade bsdtarUpgrade bsdcpio-debuginfoUpgrade bsdcpioUpgrade bsdcat-debuginfoUpgrade libarchiveUpgrade libarchive-develUpgrade bsdunzip-debuginfoUpgrade bsdtar-debuginfoNo solution existsUpgrade libarchive-debugsourceUpgrade libarchive-debuginfo | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade bsdtarUpgrade libarchive-debugsourceUpgrade libarchive-develUpgrade bsdtar-debuginfoUpgrade libarchive-debuginfoUpgrade libarchive | Feb 5, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade xtrabackupUpgrade libarchive13-32bitUpgrade libarchive-develUpgrade libarchive13Upgrade bsdtarUpgrade xtrabackup-test | Jun 30, 2025 | Jun 9, 2025 |
| Ubuntu | — | Upgrade bsdtar (Ubuntu Pro)Upgrade libarchive-dev (Ubuntu Pro)Upgrade libarchive-tools (Ubuntu Pro)Upgrade libarchive13Upgrade bsdcpio (Ubuntu Pro)Upgrade libarchive13 (Ubuntu Pro)Upgrade libarchive-devUpgrade libarchive-toolsUpgrade libarchive13t64 | Jun 26, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub