CVE-2025-25724

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

CVE-2025-25724

CVE-2025-25724 affects libarchive up to 3.7.7. The issue is in tar/util.c: list_item_verbose does not check the return value of strftime, which can enable a denial of service or other impact when reading a crafted TAR with verbose=2, potentially impacted by locale-specific buffer sizing. Connecte...

CVE-2025-25724

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

PT-2025-9197 · Unknown +8 · Libarchive +8

Name of the Vulnerable Software and Affected Versions: libarchive versions 3.7.7 and earlier Description: The list item verbose function in libarchive versions 3.7.7 and earlier does not properly check the return value of the strftime function, which can lead to a buffer overflow when processing...

SUSE CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

GHSA-W6XV-37JV-7CJR vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-2JC9-36W4-PMQW vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-GPGF-W78R-4PVJ vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-XJWR-37FP-HQ82 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-GPGF-W78R-4PVJ vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-XJWR-37FP-HQ82 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-2JC9-36W4-PMQW vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-W6XV-37JV-7CJR vulnerabilities

Vulnerabilities for packages: libarchive...

ALPINE-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

DEBIAN-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

AZL-57156 CVE-2025-1632 affecting package libarchive for versions less than 3.7.7-2

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

UBUNTU-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

CVE-2025-1632

Vulnerability CVE-2025-1632 affects libarchive up to 3.7.7, with a null pointer dereference in bsdunzip.c. Multiple connected sources (dev notices for libarchive-3.7.7 and packaging advisories) indicate exploitation is locally approachable and that a patch exists in newer builds (e.g., 3.7.7-2 an...

CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...