Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-5918

Опубликовано: 09 июн. 2025
Источник: nvd
CVSS3: 3.9
CVSS3: 6.6
EPSS Низкий

Описание

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
Версия до 3.8.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00341
Низкий

3.9 Low

CVSS3

6.6 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.9
ubuntu
около 1 года назад

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

CVSS3: 3.9
redhat
около 1 года назад

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

CVSS3: 3.9
msrc
11 месяцев назад

Libarchive: reading past eof may be triggered for piped file streams

CVSS3: 3.9
debian
около 1 года назад

A vulnerability has been identified in the libarchive library. This fl ...

CVSS3: 3.9
github
около 1 года назад

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

EPSS

Процентиль: 26%
0.00341
Низкий

3.9 Low

CVSS3

6.6 Medium

CVSS3

Дефекты

CWE-125