RockyLinux 10 : libarchive (RLSA-2025:7510)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7510 advisory. libarchive: heap buffer over-read in headergnulonglink CVE-2024-57970 Tenable has extracted the preceding description block directly from the RockyLinux security...

The vulnerability of the header_gnu_longlink function in the archive_read_support_format_tar.c file of the Libarchive library allows a attacker to cause a service failure.

The vulnerability of the headergnulonglink function in the archivereadsupportformattar.c file of the Libarchive library is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...