A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bsdtaralma-upgrade-libarchivealma-upgrade-libarchive-devel | Aug 22, 2025 | Aug 20, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bsdcpioamazon-linux-ami-2-upgrade-bsdtaramazon-linux-ami-2-upgrade-libarchiveamazon-linux-ami-2-upgrade-libarchive-debuginfoamazon-linux-ami-2-upgrade-libarchive-devel | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bsdcatamazon-linux-2023-upgrade-bsdcat-debuginfoamazon-linux-2023-upgrade-bsdcpioamazon-linux-2023-upgrade-bsdcpio-debuginfoamazon-linux-2023-upgrade-bsdtaramazon-linux-2023-upgrade-bsdtar-debuginfoamazon-linux-2023-upgrade-bsdunzipamazon-linux-2023-upgrade-bsdunzip-debuginfoamazon-linux-2023-upgrade-libarchiveamazon-linux-2023-upgrade-libarchive-debuginfoamazon-linux-2023-upgrade-libarchive-debugsourceamazon-linux-2023-upgrade-libarchive-devel | Jun 24, 2025 | May 20, 2025 | |
| Debian | debian-upgrade-libarchive | Jun 11, 2025 | Jun 9, 2025 | |
| Freebsd | freebsd-upgrade-base-14_3-release-p2freebsd-upgrade-base-14_2-release-p5freebsd-upgrade-base-13_5-release-p3 | Aug 8, 2025 | Aug 8, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libarchive | Sep 15, 2025 | Aug 9, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libarchive | Aug 13, 2025 | Aug 9, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libarchive | Sep 15, 2025 | Aug 9, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-libarchive | Sep 25, 2025 | Aug 9, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Dec 2, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-bsdcpiooracle-linux-upgrade-bsdtaroracle-linux-upgrade-libarchiveoracle-linux-upgrade-libarchive-devel | Aug 21, 2025 | May 20, 2025 |
| Redhat_linux | redhat-upgrade-bsdcat-debuginforedhat-upgrade-bsdcpioredhat-upgrade-bsdcpio-debuginforedhat-upgrade-bsdtarredhat-upgrade-bsdtar-debuginforedhat-upgrade-bsdunzip-debuginforedhat-upgrade-libarchiveredhat-upgrade-libarchive-debuginforedhat-upgrade-libarchive-debugsourceredhat-upgrade-libarchive-devel | Jul 9, 2025 | Jun 9, 2025 | |
| Rocky_linux | rocky-upgrade-bsdtarrocky-upgrade-bsdtar-debuginforocky-upgrade-libarchiverocky-upgrade-libarchive-debuginforocky-upgrade-libarchive-debugsourcerocky-upgrade-libarchive-devel | Feb 5, 2026 | Oct 3, 2025 | |
| Suse | — | suse-upgrade-bsdtarsuse-upgrade-libarchive-develsuse-upgrade-libarchive13suse-upgrade-libarchive13-32bitsuse-upgrade-xtrabackupsuse-upgrade-xtrabackup-test | Jun 30, 2025 | Jun 9, 2025 |
| Ubuntu | ubuntu-pro-upgrade-bsdcpioubuntu-pro-upgrade-bsdtarubuntu-pro-upgrade-libarchive-devubuntu-pro-upgrade-libarchive-toolsubuntu-pro-upgrade-libarchive13ubuntu-upgrade-libarchive-devubuntu-upgrade-libarchive-toolsubuntu-upgrade-libarchive13ubuntu-upgrade-libarchive13t64 | Jun 26, 2025 | Jun 9, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub