A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libarchiveUpgrade libarchive-develUpgrade bsdtar | Aug 22, 2025 | Aug 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libarchive-develUpgrade libarchiveUpgrade bsdcpioUpgrade bsdtarUpgrade libarchive-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bsdcatUpgrade libarchive-debugsourceUpgrade bsdtarUpgrade bsdunzipUpgrade bsdunzip-debuginfoUpgrade libarchive-debuginfoUpgrade bsdcat-debuginfoUpgrade bsdtar-debuginfoUpgrade bsdcpio-debuginfoUpgrade bsdcpioUpgrade libarchiveUpgrade libarchive-devel | Jun 24, 2025 | May 20, 2025 |
| Debian | — | Upgrade libarchive | Jun 11, 2025 | Jun 9, 2025 |
| Freebsd | — | Upgrade FreeBSD | Aug 8, 2025 | Aug 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libarchive | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libarchive | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libarchive | Sep 25, 2025 | Aug 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 2, 2025 |
| Oracle_linux | — | Upgrade bsdtarUpgrade bsdcpioUpgrade libarchive-develUpgrade libarchive | Aug 21, 2025 | May 20, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 20, 2025 |
| Redhat_linux | — | Upgrade bsdcat-debuginfoUpgrade bsdtarUpgrade libarchiveUpgrade bsdcpio-debuginfoUpgrade libarchive-develUpgrade bsdcpioUpgrade libarchive-debugsourceUpgrade bsdtar-debuginfoUpgrade bsdunzip-debuginfoUpgrade libarchive-debuginfoNo solution exists | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade bsdtar-debuginfoUpgrade libarchiveUpgrade libarchive-debuginfoUpgrade libarchive-debugsourceUpgrade libarchive-develUpgrade bsdtar | Feb 5, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade libarchive13-32bitUpgrade xtrabackupUpgrade libarchive13Upgrade libarchive-develUpgrade xtrabackup-testUpgrade bsdtar | Jun 30, 2025 | Jun 9, 2025 |
| Ubuntu | — | Upgrade libarchive-tools (Ubuntu Pro)Upgrade bsdtar (Ubuntu Pro)Upgrade bsdcpio (Ubuntu Pro)Upgrade libarchive13 (Ubuntu Pro)Upgrade libarchive-devUpgrade libarchive-dev (Ubuntu Pro)Upgrade libarchive13Upgrade libarchive13t64Upgrade libarchive-tools | Jun 26, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub