CVE-2025-5918
MEDIUM
MEDIUM
Priority: 0.03
BB Relevance:
28/100
Published: 2025-06-09
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Required
S:
Unchanged
C:
High
I:
None
A:
High
Description
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.
Weakness Classification (1)
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| — | — | 0 < 3.8.0 |
| libarchive | libarchive | < 3.8.0 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | openshift_container_platform | 4.0 |
References & Advisories (4)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT