Количество 15
Количество 15
CVE-2026-4111
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
CVE-2026-4111
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
CVE-2026-4111
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
CVE-2026-4111
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
CVE-2026-4111
A flaw was identified in the RAR5 archive decompression logic of the l ...
RLSA-2026:5080
Important: libarchive security update
RLSA-2026:5063
Important: libarchive security update
GHSA-xrqh-48jh-pjv2
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
ELSA-2026-5080
ELSA-2026-5080: libarchive security update (IMPORTANT)
ELSA-2026-5063
ELSA-2026-5063: libarchive security update (IMPORTANT)
BDU:2026-07260
Уязвимость библиотеки архивирования Libarchive, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260507-73-0014
Уязвимость libarchive
openSUSE-SU-2026:20797-1
Security update for libarchive
SUSE-SU-2026:2599-1
Security update for libarchive
SUSE-SU-2026:2490-1
Security update for libarchive
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-4111 A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-4111 A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-4111 A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-4111 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-4111 A flaw was identified in the RAR5 archive decompression logic of the l ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | RLSA-2026:5080 Important: libarchive security update | 1% Низкий | 4 месяца назад | |
| RLSA-2026:5063 Important: libarchive security update | 1% Низкий | 4 месяца назад | |
| GHSA-xrqh-48jh-pjv2 A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| ELSA-2026-5080 ELSA-2026-5080: libarchive security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-5063 ELSA-2026-5063: libarchive security update (IMPORTANT) | 4 месяца назад | ||
 | BDU:2026-07260 Уязвимость библиотеки архивирования Libarchive, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | ROS-20260507-73-0014 Уязвимость libarchive | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20797-1 Security update for libarchive | 2 месяца назад | ||
| SUSE-SU-2026:2599-1 Security update for libarchive | около 1 месяца назад | ||
| SUSE-SU-2026:2490-1 Security update for libarchive | около 1 месяца назад |
Уязвимостей на страницу