Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-5914

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libarchive

Default version status: unaffected

  • 0 to < 3.8.0affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:3.7.7-4.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Default version status: affected

  • 0:3.1.2-14.el7_9.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.3.3-6.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support

Default version status: affected

  • 0:3.3.2-8.el8_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:3.3.3-1.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Default version status: affected

  • 0:3.3.3-1.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 0:3.3.3-6.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Default version status: affected

  • 0:3.3.3-6.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Default version status: affected

  • 0:3.3.3-6.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 0:3.3.3-5.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 0:3.3.3-5.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.5.3-6.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.5.3-6.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Default version status: affected

  • 0:3.5.3-2.el9_0.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 0:3.5.3-5.el9_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 0:3.5.3-4.el9_4.1 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.14

Default version status: affected

  • 414.92.202510211419-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.15

Default version status: affected

  • 415.92.202601271320-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.16

Default version status: affected

  • 416.94.202601071926-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.17

Default version status: affected

  • 417.94.202510112152-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 418.94.202510230424-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 4.19.9.6.202510140714-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.20

Default version status: affected

  • 4.20.9.6.202509251656-0 to < *unaffected

Red Hat Red Hat Web Terminal 1.11 on RHEL 9

Default version status: affected

  • 1.11-19 to < *unaffected

Red Hat Red Hat Web Terminal 1.11 on RHEL 9

Default version status: affected

  • 1.11-8 to < *unaffected

Red Hat Red Hat Web Terminal 1.12 on RHEL 9

Default version status: affected

  • 1.12-4 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-10 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-10 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-4 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-9 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-12 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-18 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-11 to < *unaffected

Red Hat RHOSS-1.36-RHEL-8

Default version status: affected

  • 1.36.0-7 to < *unaffected

Red Hat cert-manager operator for Red Hat OpenShift 1.16

Default version status: affected

  • v1.16.5-1760515757 to < *unaffected

Red Hat Compliance Operator 1

Default version status: affected

  • 1.8.0 to < *unaffected

Red Hat Compliance Operator 1

Default version status: affected

  • 1.8.0 to < *unaffected

Red Hat Compliance Operator 1

Default version status: affected

  • 1.8.0 to < *unaffected

Red Hat OpenShift File Integrity Operator - FIO 1

Default version status: affected

  • v1.3 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 2.2.1-1758555934 to < *unaffected

Red Hat Red Hat Insights proxy 1.5

Default version status: affected

  • 1.5.6-1756187445 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116455 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116482 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116441 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116449 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116439 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116447 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756128595 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756125872 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.5.3

Default version status: affected

  • rhosdt-3.5-1756116445 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757422110 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757421846 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757421804 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757422070 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757421879 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757422401 to < *unaffected

Red Hat Red Hat OpenShift sandboxed containers 1.10

Default version status: affected

  • 1.10.2-1757421890 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

References