Lucene search
+L

3771 matches found

osv_debian
osv_debian
•added 2025/06/09 8:15 p.m.•4 views

DEBIAN-CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS6.9AI score0.00444EPSS
SaveExploits2References1
osv_azl
osv_azl
•added 2025/06/09 8:15 p.m.•16 views

AZL-63783 CVE-2025-5914 affecting package libarchive for versions less than 3.7.7-3

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS7.7AI score0.00444EPSS
SaveExploits2References1
osv_azl
osv_azl
•added 2025/06/09 8:15 p.m.•17 views

AZL-63786 CVE-2025-5915 affecting package libarchive for versions less than 3.7.7-3

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory buffer, which can...

6.6CVSS6.2AI score0.00197EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2025/06/09 8:15 p.m.•22 views

CVE-2025-5915

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory buffer, which can...

6.6CVSS6.9AI score0.00197EPSS
SaveExploits1References4
NVD
NVD
•added 2025/06/09 8:15 p.m.•28 views

CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS0.00444EPSS
SaveExploits2References33
osv_ubuntu
osv_ubuntu
•added 2025/06/09 8:15 p.m.•17 views

UBUNTU-CVE-2025-5917

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS7.2AI score0.00226EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2025/06/09 8:15 p.m.•9 views

UBUNTU-CVE-2025-5918

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memo...

6.6CVSS7AI score0.00377EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2025/06/09 8:15 p.m.•14 views

UBUNTU-CVE-2025-5916

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...

5.6CVSS7.1AI score0.00211EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2025/06/09 8:15 p.m.•8 views

UBUNTU-CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS7.1AI score0.00444EPSS
SaveExploits2References9
osv_ubuntu
osv_ubuntu
•added 2025/06/09 8:15 p.m.•13 views

UBUNTU-CVE-2025-5915

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory buffer, which can...

6.6CVSS7.2AI score0.00197EPSS
SaveExploits1References7
Mend
Mend
•added 2025/06/09 7:53 p.m.•5 views

CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

8.5CVSS0.00444EPSS
SaveExploits2References39
Vulnrichment
Vulnrichment
•added 2025/06/09 7:53 p.m.•7 views

CVE-2025-5914 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS5AI score0.00444EPSS
SaveExploits2References32
Cvelist
Cvelist
•added 2025/06/09 7:53 p.m.•182 views

CVE-2025-5914 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS0.00444EPSS
SaveExploits2References32
CVE
CVE
•added 2025/06/09 7:53 p.m.•440 views

CVE-2025-5914

CVE-2025-5914 affects libarchive. The vuln is in archive_read_format_rar_seek_data() and stems from an integer overflow that can lead to a double-free, causing memory corruption with potential arbitrary code execution or denial of service. Public docs in Debian/Red Hat/AlmaLinux advisories confir...

7.8CVSS8.1AI score0.00444EPSS
SaveExploits2References33Affected Software1
attackerkb
attackerkb
•added 2025/06/09 7:53 p.m.•13 views

CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS7.2AI score0.00444EPSS
SaveExploits2References33
osv_cve
osv_cve
•added 2025/06/09 7:53 p.m.•15 views

CVE-2025-5914 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS7AI score
SaveExploits0References38
Debian CVE
Debian CVE
•added 2025/06/09 7:53 p.m.•24 views

CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

7.8CVSS6.9AI score0.00444EPSS
SaveExploits2
osv_cve
osv_cve
•added 2025/06/09 7:49 p.m.•7 views

CVE-2025-5917 Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

2.8CVSS6.3AI score
SaveExploits0References8
attackerkb
attackerkb
•added 2025/06/09 7:49 p.m.•19 views

CVE-2025-5917

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS6.2AI score0.00226EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/06/09 7:49 p.m.•3 views

CVE-2025-5918 Libarchive: reading past eof may be triggered for piped file streams

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memo...

3.9CVSS6.9AI score0.00377EPSS
SaveExploits0References4
Rows per page
Query Builder