A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bsdtarUpgrade libarchive-develUpgrade libarchive | Aug 22, 2025 | Aug 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bsdtarUpgrade libarchiveUpgrade bsdcpioUpgrade libarchive-develUpgrade libarchive-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bsdcpioUpgrade bsdtar-debuginfoUpgrade bsdcpio-debuginfoUpgrade bsdcat-debuginfoUpgrade libarchive-debuginfoUpgrade bsdunzip-debuginfoUpgrade libarchive-develUpgrade libarchiveUpgrade bsdcatUpgrade libarchive-debugsourceUpgrade bsdtarUpgrade bsdunzip | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade libarchive | Jun 11, 2025 | Jun 9, 2025 |
| Freebsd | — | Upgrade FreeBSD | Aug 8, 2025 | Aug 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libarchive | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libarchive | Sep 25, 2025 | Aug 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 2, 2025 |
| Oracle_linux | — | Upgrade bsdtarUpgrade libarchive-develUpgrade bsdcpioUpgrade libarchive | Aug 21, 2025 | May 20, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 20, 2025 |
| Redhat_linux | — | Upgrade libarchive-debuginfoUpgrade bsdtar-debuginfoNo solution existsUpgrade libarchive-debugsourceUpgrade bsdunzip-debuginfoUpgrade bsdcpio-debuginfoUpgrade libarchiveUpgrade libarchive-develUpgrade bsdcpioUpgrade bsdtarUpgrade bsdcat-debuginfo | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade libarchive-debugsourceUpgrade libarchive-develUpgrade bsdtarUpgrade libarchiveUpgrade libarchive-debuginfoUpgrade bsdtar-debuginfo | Feb 5, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade libarchive13-32bitUpgrade xtrabackupUpgrade xtrabackup-testUpgrade bsdtarUpgrade libarchive13Upgrade libarchive-devel | Jun 30, 2025 | Jun 9, 2025 |
| Ubuntu | — | Upgrade libarchive-devUpgrade bsdcpio (Ubuntu Pro)Upgrade bsdtar (Ubuntu Pro)Upgrade libarchive13 (Ubuntu Pro)Upgrade libarchive-dev (Ubuntu Pro)Upgrade libarchive13Upgrade libarchive-tools (Ubuntu Pro)Upgrade libarchive-toolsUpgrade libarchive13t64 | Jun 26, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub