← CVE Intelligence

CVE-2025-5914

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c PUBLISHED

Description (CNA)

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 3.8.0
Red Hat / Red Hat Enterprise Linux 10unaffected 0:3.7.7-4.el10_0 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:3.1.2-14.el7_9.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:3.3.3-6.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:3.3.2-8.el8_2.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:3.3.3-1.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:3.3.3-1.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:3.3.3-6.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:3.3.3-6.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:3.3.3-6.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:3.3.3-5.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:3.3.3-5.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:3.5.3-6.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:3.5.3-6.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:3.5.3-2.el9_0.1 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:3.5.3-5.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:3.5.3-4.el9_4.1 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 414.92.202510211419-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 415.92.202601271320-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 416.94.202601071926-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 417.94.202510112152-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 418.94.202510230424-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.19unaffected 4.19.9.6.202510140714-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.20unaffected 4.20.9.6.202509251656-0 before *
Red Hat / Red Hat Web Terminal 1.11 on RHEL 9unaffected 1.11-19 before *
Red Hat / Red Hat Web Terminal 1.11 on RHEL 9unaffected 1.11-8 before *
Red Hat / Red Hat Web Terminal 1.12 on RHEL 9unaffected 1.12-4 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-10 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-10 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-4 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-9 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-12 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-18 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-11 before *
Red Hat / RHOSS-1.36-RHEL-8unaffected 1.36.0-7 before *
Red Hat / cert-manager operator for Red Hat OpenShift 1.16unaffected v1.16.5-1760515757 before *
Red Hat / Compliance Operator 1unaffected 1.8.0 before *
Red Hat / Compliance Operator 1unaffected 1.8.0 before *
Red Hat / Compliance Operator 1unaffected 1.8.0 before *
Red Hat / OpenShift File Integrity Operator - FIO 1unaffected v1.3 before *
Red Hat / Red Hat Discovery 2unaffected 2.2.1-1758555934 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1.5.6-1756187445 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116455 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116482 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116441 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116449 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116439 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116447 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756128595 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756125872 before *
Red Hat / Red Hat OpenShift distributed tracing 3.5.3unaffected rhosdt-3.5-1756116445 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757422110 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757421846 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757421804 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757422070 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757421879 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757422401 before *
Red Hat / Red Hat OpenShift sandboxed containers 1.10unaffected 1.10.2-1757421890 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-190

References

ADP enrichment

CISA-ADP

No English description supplied.

siemens-SADP

No English description supplied.