Skip to content
Fencer Vulns
high 7.8

CVE-2025-5914 json

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

published 2025-06-09 17 mo ago modified 2026-11-06 3 d ago also EUVD-2025-17572 , JLSEC-2025-245

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 42%
public exploits
0
none known

Summary

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Patch / fix

  • julia LibArchive_jll 3.8.0+0
  • Red Hat Red Hat Enterprise Linux 10 0:3.7.7-4.el10_0
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:3.1.2-14.el7_9.1
  • Red Hat Red Hat Enterprise Linux 8 0:3.3.3-6.el8_10
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support 0:3.3.2-8.el8_2.1
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:3.3.3-1.el8_4.1
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:3.3.3-1.el8_4.1
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:3.3.3-6.el8_6
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service 0:3.3.3-6.el8_6
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 0:3.3.3-6.el8_6
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service 0:3.3.3-5.el8_8.1
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 0:3.3.3-5.el8_8.1
  • Red Hat Red Hat Enterprise Linux 9 0:3.5.3-6.el9_6
  • Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions 0:3.5.3-2.el9_0.1
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:3.5.3-5.el9_2
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 0:3.5.3-4.el9_4.1
  • Red Hat Red Hat OpenShift Container Platform 4.14 414.92.202510211419-0
  • Red Hat Red Hat OpenShift Container Platform 4.15 415.92.202601271320-0
  • Red Hat Red Hat OpenShift Container Platform 4.16 416.94.202601071926-0
  • Red Hat Red Hat OpenShift Container Platform 4.17 417.94.202510112152-0
  • Red Hat Red Hat OpenShift Container Platform 4.18 418.94.202510230424-0
  • Red Hat Red Hat OpenShift Container Platform 4.19 4.19.9.6.202510140714-0
  • Red Hat Red Hat OpenShift Container Platform 4.20 4.20.9.6.202509251656-0
  • Red Hat Red Hat Web Terminal 1.11 on RHEL 9 1.11-8, 1.11-19
  • Red Hat Red Hat Web Terminal 1.12 on RHEL 9 1.12-4
  • Red Hat RHOSS-1.36-RHEL-8 1.36.0-4, 1.36.0-7, 1.36.0-9, 1.36.0-10, 1.36.0-11, 1.36.0-12, 1.36.0-18
  • Red Hat cert-manager operator for Red Hat OpenShift 1.16 v1.16.5-1760515757
  • Red Hat OpenShift Compliance Operator 1 1.8.0
  • Red Hat OpenShift File Integrity Operator - FIO 1 v1.3
  • Red Hat Red Hat Discovery 2 2.2.1-1758555934
  • libarchive Debian 12 3.6.2-1+deb12u3
  • libarchive Debian 14, Debian 13 3.7.4-4

debian advisories DEBIAN-CVE-2025-5914

  • libarchive Ubuntu 22.04 LTS 3.6.0-1ubuntu1.5
  • libarchive Ubuntu 24.04 LTS 3.7.2-2ubuntu0.5
  • libarchive Ubuntu 25.10 3.7.7-0ubuntu3
  • libarchive Ubuntu Pro 14.04 LTS 3.1.2-7ubuntu2.8+esm4
  • libarchive Ubuntu Pro 16.04 LTS 3.1.2-11ubuntu0.16.04.8+esm2
  • libarchive Ubuntu Pro 18.04 LTS 3.2.2-3.1ubuntu0.7+esm2
  • libarchive Ubuntu Pro 20.04 LTS 3.4.0-2ubuntu1.5+esm1

ubuntu advisories UBUNTU-CVE-2025-5914

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • libarchive RHEL 10.0 3.7.7-4.el10_0
  • bsdtar RHEL 10.0 3.7.7-4.el10_0
  • libarchive RHEL 8 3.3.3-6.el8_10
  • bsdtar RHEL 8 3.3.3-6.el8_10
  • libarchive RHEL 9 3.5.3-6.el9_6
  • bsdtar RHEL 9 3.5.3-6.el9_6
  • libarchive RHEL 9.2 E4S 3.5.3-5.el9_2
  • bsdtar RHEL 9.2 E4S 3.5.3-5.el9_2

red hat advisories RHSA-2025:15024RHSA-2025:14828RHSA-2025:14810RHSA-2025:14808RHSA-2025:14528RHSA-2025:14525

  • libarchive Linux Micro 6.0 3.6.2-5.1
  • libarchive SLE Micro 5.5, SLE Micro 5.4, SLE Micro 5.3 +10 more 3.5.1-150400.3.21.1
  • libarchive Linux Micro 6.1 3.7.4-slfo.1.1_3.1
  • libarchive SLE Module for Development Tools 15 SP7, SLE Module for Development Tools 15 SP6, SLE Module for Basesystem 15 SP7 +2 more 3.7.2-150600.3.17.1
  • libarchive SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 3.3.3-32.14.1

suse advisories SUSE-SU-2025:02522-2SUSE-SU-2025:20560-1SUSE-SU-2025:02718-2SUSE-SU-2025:20594-1SUSE-SU-2025:02718-1SUSE-SU-2025:02566-1

  • libarchive AlmaLinux 9 3.5.3-6.el9_6
  • bsdtar AlmaLinux 9 3.5.3-6.el9_6
  • libarchive AlmaLinux 8 3.3.3-6.el8_10
  • bsdtar AlmaLinux 8 3.3.3-6.el8_10
  • libarchive AlmaLinux 10 3.7.7-4.el10_0
  • bsdtar AlmaLinux 10 3.7.7-4.el10_0

almalinux advisories ALSA-2025:14130ALSA-2025:14135ALSA-2025:14137

  • libarchive Rocky Linux 9 3.5.3-6.el9_6
  • libarchive Rocky Linux 10 3.7.7-4.el10_0
  • libarchive Rocky Linux 8 3.3.3-6.el8_10

rocky linux advisories RLSA-2025:14130RLSA-2025:14137RLSA-2025:14135

  • libarchive Azure Linux 3.0 3.7.7-3
  • libarchive CBL-Mariner 2.0 3.6.1-7

azure linux advisories AZL-63783AZL-63860

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-5914 updated cvss 7.8

libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

  • Red Hat Enterprise Linux 6 libarchive
    affected: no fix planned “Out of support scope”
  • Red Hat cert-manager operator for Red Hat OpenShift 1.16 cert-manager v1.16.5-1760515757
    fixed: vendor fix RHSA-2025:18219
  • Red Hat OpenShift Compliance Operator 1 compliance
    fixed: vendor fix RHSA-2025:21885
  • Red Hat OpenShift File Integrity Operator - FIO 1 compliance
    fixed: vendor fix RHSA-2025:21913
  • Red Hat CodeReady Linux Builder EUS (v.9.4) bsdcat-debuginfo 3.5.3-4.el9_4.1, bsdtar-debuginfo 3.5.3-4.el9_4.1, libarchive-devel 3.5.3-4.el9_4.1, bsdcpio-debuginfo 3.5.3-4.el9_4.1, libarchive-debuginfo 3.5.3-4.el9_4.1, libarchive-debugsource 3.5.3-4.el9_4.1
    fixed: vendor fix RHSA-2025:14142
  • Red Hat Discovery 2 discovery 2.2.1-1758555934
    fixed: vendor fix RHSA-2025:16524
  • Red Hat Enterprise Linux AppStream (v. 9) bsdtar 3.5.3-6.el9_6
    fixed: vendor fix RHSA-2025:14130
  • Red Hat Enterprise Linux AppStream (v. 10) bsdtar 3.7.7-4.el10_0
    fixed: vendor fix RHSA-2025:14137
show 30 more
  • Red Hat Enterprise Linux AppStream E4S (v.9.0) bsdtar 3.5.3-2.el9_0.1
    fixed: vendor fix RHSA-2025:14141
  • Red Hat Enterprise Linux AppStream E4S (v.9.2) bsdtar 3.5.3-5.el9_2
    fixed: vendor fix RHSA-2025:15024
  • Red Hat Enterprise Linux AppStream EUS (v.9.4) bsdtar 3.5.3-4.el9_4.1
    fixed: vendor fix RHSA-2025:14142
  • Red Hat Enterprise Linux BaseOS (v. 8) bsdtar 3.3.3-6.el8_10, libarchive 3.3.3-6.el8_10
    fixed: vendor fix RHSA-2025:14135
  • Red Hat Enterprise Linux BaseOS (v. 9) libarchive 3.5.3-6.el9_6
    fixed: vendor fix RHSA-2025:14130
  • Red Hat Enterprise Linux BaseOS (v. 10) libarchive 3.7.7-4.el10_0
    fixed: vendor fix RHSA-2025:14137
  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bsdtar 3.3.2-8.el8_2.1, libarchive 3.3.2-8.el8_2.1
    fixed: vendor fix RHSA-2025:14528
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bsdtar 3.3.3-1.el8_4.1, libarchive 3.3.3-1.el8_4.1
    fixed: vendor fix RHSA-2025:14810
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6) bsdtar 3.3.3-6.el8_6, libarchive 3.3.3-6.el8_6 Red Hat Enterprise Linux BaseOS E4S (v.8.6) bsdtar 3.3.3-6.el8_6, libarchive 3.3.3-6.el8_6
    fixed: vendor fix RHSA-2025:14808
  • Red Hat Enterprise Linux BaseOS E4S (v.8.8) bsdtar 3.3.3-5.el8_8.1, libarchive 3.3.3-5.el8_8.1
    fixed: vendor fix RHSA-2025:14525
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0) libarchive 3.5.3-2.el9_0.1
    fixed: vendor fix RHSA-2025:14141
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2) libarchive 3.5.3-5.el9_2
    fixed: vendor fix RHSA-2025:15024
  • Red Hat Enterprise Linux BaseOS EUS (v.9.4) libarchive 3.5.3-4.el9_4.1
    fixed: vendor fix RHSA-2025:14142
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bsdtar 3.3.3-1.el8_4.1, libarchive 3.3.3-1.el8_4.1
    fixed: vendor fix RHSA-2025:14810
  • Red Hat Enterprise Linux BaseOS TUS (v.8.6) bsdtar 3.3.3-6.el8_6, libarchive 3.3.3-6.el8_6
    fixed: vendor fix RHSA-2025:14808
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8) bsdtar 3.3.3-5.el8_8.1, libarchive 3.3.3-5.el8_8.1
    fixed: vendor fix RHSA-2025:14525
  • Red Hat Enterprise Linux CRB (v. 8) bsdcat-debuginfo 3.3.3-6.el8_10, bsdtar-debuginfo 3.3.3-6.el8_10, libarchive-devel 3.3.3-6.el8_10, bsdcpio-debuginfo 3.3.3-6.el8_10, libarchive-debuginfo 3.3.3-6.el8_10, libarchive-debugsource 3.3.3-6.el8_10
    fixed: vendor fix RHSA-2025:14135
  • Red Hat Enterprise Linux Server (v. 7 ELS) libarchive 3.1.2-14.el7_9.1 Red Hat Enterprise Linux Server Optional (v. 7 ELS) bsdtar 3.1.2-14.el7_9.1, bsdcpio 3.1.2-14.el7_9.1
    fixed: vendor fix RHSA-2025:14828
  • Red Hat Insights proxy 1.5 insights-proxy 1.5.6-1756187445
    fixed: vendor fix RHSA-2025:14644
  • Red Hat OpenShift Container Platform 4.14 rhcos 414.92.202510211419
    fixed: vendor fix RHSA-2025:19041
  • Red Hat OpenShift Container Platform 4.15 rhcos 415.92.202601271320
    fixed: vendor fix RHSA-2026:1541
  • Red Hat OpenShift Container Platform 4.16 rhcos 416.94.202601071926
    fixed: vendor fix RHSA-2026:0326
  • Red Hat OpenShift Container Platform 4.17 rhcos 417.94.202510112152
    fixed: vendor fix RHSA-2025:18218
  • Red Hat OpenShift Container Platform 4.18 rhcos 418.94.202510230424
    fixed: vendor fix RHSA-2025:19046
  • Red Hat OpenShift Container Platform 4.19 rhcos 4.19.9.6.202510140714
    fixed: vendor fix RHSA-2025:18217
  • Red Hat OpenShift Container Platform 4.20 rhcos 4.20.9.6.202509251656
    fixed: vendor fix RHSA-2025:15397
  • Red Hat OpenShift distributed tracing 3.5.3 rhosdt rhosdt-3.5-1756116439, rhosdt rhosdt-3.5-1756116441, rhosdt rhosdt-3.5-1756116445, rhosdt rhosdt-3.5-1756116447, rhosdt rhosdt-3.5-1756116449, rhosdt rhosdt-3.5-1756116455, +3 more
    fixed: vendor fix RHSA-2025:14594
  • Red Hat OpenShift sandboxed containers 1.10 openshift-sandboxed-containers 1.10.2-1757421804, openshift-sandboxed-containers 1.10.2-1757421846, openshift-sandboxed-containers 1.10.2-1757421879, openshift-sandboxed-containers 1.10.2-1757421890, openshift-sandboxed-containers 1.10.2-1757422070, openshift-sandboxed-containers 1.10.2-1757422110, +1 more
    fixed: vendor fix RHSA-2025:15709
  • Red Hat OpenShift Serverless 1.36 openshift-serverless-1/logic-rhel8-operator 1.36.0-18, openshift-serverless-1/logic-operator-bundle 1.36.0-12, openshift-serverless-1/logic-swf-devmode-rhel8 1.36.0-7, openshift-serverless-1/logic-swf-builder-rhel8 1.36.0-11, openshift-serverless-1/logic-db-migrator-tool-rhel8 1.36.0-11, openshift-serverless-1/logic-management-console-rhel8 1.36.0-9, +5 more
    fixed: vendor fix RHSA-2026:0934
  • Red Hat Web Terminal 1.11 on RHEL 9 web-terminal/web-terminal-tooling-rhel9 1.11-8, web-terminal/web-terminal-rhel9-operator 1.11-19
    fixed: vendor fix RHSA-2025:15828

1 more fixed, 6 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-26-202-04 updated cvss 7.8

Siemens SIDIS Secured SmartPlug

  • Siemens SIDIS Secured SmartPlug < 7.26.0310
    affected: fixed in V7.26.0310

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
partial
Assessed
16 mo ago

Exploit prediction

0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/libarchive/libarchive/pull/2598 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
OSV 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
julia LibArchive_jll
<3.8.0+0
3.8.0+0

Affected products

  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
  • Red Hat Red Hat OpenShift Container Platform 4.14
  • Red Hat Red Hat OpenShift Container Platform 4.15
  • Red Hat Red Hat OpenShift Container Platform 4.16
  • Red Hat Red Hat OpenShift Container Platform 4.17
  • Red Hat Red Hat OpenShift Container Platform 4.18
  • Red Hat Red Hat OpenShift Container Platform 4.19
  • Red Hat Red Hat OpenShift Container Platform 4.20
  • Red Hat Red Hat Web Terminal 1.11 on RHEL 9
  • Red Hat Red Hat Web Terminal 1.12 on RHEL 9
  • Red Hat RHOSS-1.36-RHEL-8
  • Red Hat cert-manager operator for Red Hat OpenShift 1.16
  • Red Hat OpenShift Compliance Operator 1
  • Red Hat OpenShift File Integrity Operator - FIO 1
  • Red Hat Red Hat Discovery 2
  • Red Hat Red Hat Insights proxy 1.5
  • Red Hat Red Hat OpenShift distributed tracing 3.5.3
  • Red Hat Red Hat OpenShift sandboxed containers 1.10
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat OpenShift Container Platform 4
  • Siemens SIDIS Secured SmartPlug

Classification

Weakness
  • CWE-190 Integer Overflow or Wraparound

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.