A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bsdtarUpgrade libarchive-develUpgrade libarchive | Aug 22, 2025 | Aug 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libarchive-debuginfoUpgrade libarchive-develUpgrade libarchiveUpgrade bsdtarUpgrade bsdcpio | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libarchive-develUpgrade bsdcpio-debuginfoUpgrade bsdtar-debuginfoUpgrade bsdcat-debuginfoUpgrade bsdcpioUpgrade libarchiveUpgrade bsdunzip-debuginfoUpgrade libarchive-debuginfoUpgrade libarchive-debugsourceUpgrade bsdcatUpgrade bsdtarUpgrade bsdunzip | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade libarchive | Jun 11, 2025 | Jun 9, 2025 |
| Freebsd | — | Upgrade FreeBSD | Aug 8, 2025 | Aug 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libarchive | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libarchive | Sep 25, 2025 | Aug 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 2, 2025 |
| Oracle_linux | — | Upgrade libarchive-develUpgrade libarchiveUpgrade bsdtarUpgrade bsdcpio | Aug 21, 2025 | May 20, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 20, 2025 |
| Redhat_linux | — | Upgrade libarchiveUpgrade bsdcpio-debuginfoUpgrade libarchive-develUpgrade bsdtarUpgrade bsdcpioUpgrade bsdcat-debuginfoUpgrade bsdunzip-debuginfoUpgrade libarchive-debuginfoNo solution existsUpgrade bsdtar-debuginfoUpgrade libarchive-debugsource | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade libarchiveUpgrade libarchive-debuginfoUpgrade bsdtar-debuginfoUpgrade bsdtarUpgrade libarchive-develUpgrade libarchive-debugsource | Feb 5, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade libarchive13Upgrade libarchive-develUpgrade xtrabackup-testUpgrade bsdtarUpgrade xtrabackupUpgrade libarchive13-32bit | Jun 30, 2025 | Jun 9, 2025 |
| Ubuntu | — | Upgrade bsdtar (Ubuntu Pro)Upgrade libarchive-tools (Ubuntu Pro)Upgrade libarchive13Upgrade libarchive13 (Ubuntu Pro)Upgrade libarchive-devUpgrade bsdcpio (Ubuntu Pro)Upgrade libarchive-dev (Ubuntu Pro)Upgrade libarchive-toolsUpgrade libarchive13t64 | Jun 26, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub