libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.
| Reporter | Title | Published | Views | Family All 45 |
|---|---|---|---|---|
 | CVE-2024-57970 | 16 Feb 202500:00 | – | alpinelinux |
 | The vulnerability of the header_gnu_longlink function in the archive_read_support_format_tar.c file of the Libarchive library allows a attacker to cause a service failure. | 5 May 202500:00 | – | bdu_fstec |
 | CVE-2024-57970 vulnerabilities | 19 Mar 202504:12 | – | cgr |
 | Rocky Linux 10.0 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2025_7510) | 1 Oct 202600:00 | – | nessus |
| Oracle Linux 10 : libarchive (ELSA-2025-7510) | 27 Jun 202500:00 | – | nessus |
| RHEL 10 : libarchive (RHSA-2025:7510) | 5 Jun 202500:00 | – | nessus |
| RockyLinux 10 : libarchive (RLSA-2025:7510) | 4 Oct 202500:00 | – | nessus |
| Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2025-079-01) | 20 Mar 202500:00 | – | nessus |
 | CVE-2024-57970 | 16 Feb 202504:15 | – | circl |
 | libarchive 安全漏洞 | 16 Feb 202500:00 | – | cnnvd |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Sep 2025 22:29Current
7High risk
Vulners AI Score7
CVSS 3.14
EPSS0.0025
SSVC