A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2025-5918 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2370877 | Issue Tracking |
| https://github.com/libarchive/libarchive/pull/2584 | Patch |
| https://github.com/libarchive/libarchive/releases/tag/v3.8.0 | Release Notes |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
15 Aug 2025, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/CVE-2025-5918 - Vendor Advisory | |
| References | () https://github.com/libarchive/libarchive/releases/tag/v3.8.0 - Release Notes | |
| References | () https://github.com/libarchive/libarchive/pull/2584 - Patch | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2370877 - Issue Tracking | |
| First Time |
Redhat openshift Container Platform
Redhat enterprise Linux Libarchive Redhat Libarchive libarchive |
|
| CPE | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.6 |
09 Jun 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-09 20:15
Updated : 2025-08-15 18:35
NVD link : CVE-2025-5918
Mitre link : CVE-2025-5918
JSON object : View
Products Affected
libarchive
- libarchive
redhat
- enterprise_linux
- openshift_container_platform
CWE
CWE-125
Out-of-bounds Read