Skip to main content

Enterprise Linux EUVD-2025-17572

| CVE-2025-5914 HIGH
Integer Overflow or Wraparound (CWE-190)
2025-06-09 secalert@redhat.com
Buffer Overflow RCE Enterprise Linux Libarchive Openshift Container Platform Red Hat Suse
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM
qualitative
SUSE
HIGH
qualitative
Red Hat
7.8 HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 14, 2026 - 19:21 euvd
EUVD-2025-17572
Analysis Generated
Mar 14, 2026 - 19:21 vuln.today
PoC Detected
Feb 05, 2026 - 20:15 vuln.today
Public exploit code
CVE Published
Jun 09, 2025 - 20:15 nvd
HIGH 7.8

DescriptionCVE.org

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

AnalysisAI

CVE-2025-5914 is an integer overflow vulnerability in libarchive's archive_read_format_rar_seek_data() function that leads to a double-free memory corruption condition. This affects all users of libarchive who process untrusted RAR archive files, potentially allowing arbitrary code execution or denial-of-service with user interaction (opening a malicious RAR file). While no KEV listing or confirmed public exploits are currently documented, the high CVSS score (7.8) and memory safety nature of the vulnerability indicate significant real-world risk if weaponized.

Technical ContextAI

libarchive is a widely-used open-source library for reading and writing archive formats (TAR, ZIP, RAR, etc.), integrated into numerous applications and operating systems. The vulnerability exists in the RAR format handler, specifically the archive_read_format_rar_seek_data() function, which processes seek operations within RAR archives. An integer overflow (CWE-190) in size calculations causes incorrect memory allocation or boundary checks, subsequently leading to a double-free condition (CWE-415) when the same memory region is freed multiple times. This is a classic memory safety defect: an attacker crafts a malicious RAR file with specific seek offset values that overflow, causing the library to free previously-freed memory when processing the archive. CPE affected: cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:* (all versions prior to patch).

RemediationAI

  1. IMMEDIATE: Update libarchive to the first patched version (typically 3.7.1 or later, pending official release note—consult libarchive GitHub releases). 2) For distributions: Apply security updates from your vendor (Ubuntu, Debian, Red Hat, etc.) when available. 3) TEMPORARY WORKAROUNDS: Disable RAR format support if possible in applications, restrict archive processing to trusted sources only, or sandbox archive extraction in isolated containers. 4) CODE REVIEW: Applications should validate RAR archives before processing and consider input sanitization. Vendor advisory expected from libarchive maintainers on GitHub; check https://github.com/libarchive/libarchive/security/advisories and vendor-specific security pages (Apple Security Updates, Chromium Security, Red Hat CVE details).

Vendor StatusVendor

Ubuntu

Priority: Medium
libarchive
Release Status Version
bionic needed -
focal needed -
upstream needs-triage -
jammy released 3.6.0-1ubuntu1.5
noble released 3.7.2-2ubuntu0.5
oracular released 3.7.4-1ubuntu0.3
trusty needed -
xenial needed -
plucky released 3.7.7-0ubuntu2.3
questing released 3.7.7-0ubuntu3
USN-7601-1

Debian

Bug #1107621
libarchive
Release Status Fixed Version Urgency
bullseye fixed 3.4.3-2+deb11u3 -
bullseye (security) fixed 3.4.3-2+deb11u3 -
bookworm fixed 3.6.2-1+deb12u3 -
bookworm (security) vulnerable 3.6.2-1+deb12u2 -
trixie fixed 3.7.4-4 -
forky, sid fixed 3.8.5-1 -
(unstable) fixed 3.7.4-4 -
DLA-4368-1

SUSE

Severity: High
Product Status
Container bci/spack:0.23.1-11.30 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/pytorch:2.7.0-nvidia-2.39 Container containers/vllm-openai:0.9.1-1.2 Container suse/manager/5.0/x86_64/server:5.0.5.1.7.33.2 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.1.8.7.1 Image SLES15-SP6-SAP Image SLES15-SP6-SAP-Azure Image SLES15-SP6-SAP-EC2 Image SLES15-SP6-SAP-GCE Image SLES15-SP6-SAPCAL Image SLES15-SP6-SAPCAL-Azure Image SLES15-SP6-SAPCAL-EC2 Image SLES15-SP6-SAPCAL-GCE Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE Image ai_15_6 Image server-image Affected
Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE Affected
SUSE Liberty Linux 7 LTSS Fixed
SUSE Liberty Linux 8 Fixed
SUSE Liberty Linux 9 Fixed

Share

EUVD-2025-17572 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy