Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-60753

Опубликовано: 05 нояб. 2025
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
Версия до 3.8.1 (включая)

EPSS

Процентиль: 9%
0.00033
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.5
ubuntu
3 месяца назад

An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).

msrc
3 месяца назад

An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).

CVSS3: 5.5
debian
3 месяца назад

An issue was discovered in libarchive bsdtar before version 3.8.1 in f ...

CVSS3: 5.5
github
3 месяца назад

An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).

CVSS3: 5.5
fstec
6 месяцев назад

Уязвимость функции apply_substitution библиотеки libarchive, позволяющая нарушителю вызвать отказ в обслуживании.

EPSS

Процентиль: 9%
0.00033
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400